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ELECTRONIC SETTLEMENT SYSTEM, 



SETTLEMENT APPARATUS, AND TERMINAL 



BACKGROUND OF THE INVENTION 




1 . 



Field of the Invention 



The present invention relates to an elec 



settlement 



system, a settlement apparatus, and its terminal . In particular, 
the present invention relates to an electronic settlement system 
and a settlement apparatus, which may perform a settlement of a 
commercial transaction electronically via a communication network, 
and its terminal. The present application relates to the 
international patent publication identified below. For those 
designated countries that permit incorporation of publications 
by reference, the contents of this international patent publication 
are incorporated herein by reference, as a part of the description 
of the present patent application. 



2. Description of the Related Art 

Conventionally, in an electronic settlement system, which 
executes a settlement of a commercial transaction electronically 
via a communication network, personal data such as a credit card 
number is sent in the form of digital data such as a credit card 
number via the Internet. Sending personal data such as a credit 
card number directly, the credit card number may be stolen and 
suffer from a false use. Thus, it is necessary to keep personal 
data from being leaked by using a high level of cryptology. To 
improve security, the electronic settlement system needs a complex 
authenticating procedure however this sacrifices convenience. 



Therefore, an object of the present invention is to solve 



PCT/JP99/04178 filed on August 2, 1999 
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such a problem and provide a safe and convenient electronic 
settlement system. 

SUMMARY OF THE INVENTION 

5 

Therefore , it is an obj ect of the present invention to provide 
a electronic sett lement system, settlement apparatus , and terminal 
which overcomes the above issues in the related art. This object 
is achieved by combinations described in the independent claims. 
10 The dependent claims define further advantageous and exemplary 
combinations of the present invention. 

According to the first aspect of the present invention, an 
electronic settlement system for settling up a transaction through 
W a communication network, comprises: a settlement apparatus which 

Q 15 performs the settlement of the transaction; a billing terminal 
Hi connecting to the settlement apparatus via the communication 

y i 

Sf network; and a paying terminal, connecting to the settlement 

i=^^ apparatus via the communication network, the settlement apparatus 

^ may perform the settlement of transaction by synchronizing a 

flj 20 communication to the billing terminal with a communication to the 
2 paying terminal when the settlement apparatus sets up a transaction 

identifying number which identifies the transaction and when the 
paying terminal transmits the same transaction identifying number 
to the settlement apparatus. 

25 The billing terminal may connect to the settlement apparatus 

via a commercial telephone line or a private line, and the paying 
terminal may connect to the settlement apparatus via a 
radiotelephone communication . 

According to the second aspect of the present invention, 
30 a settlement apparatus performing a settlement of a transaction, 
which communicates with a billing terminal performing billing of 
the transaction and with a paying terminal performing paying of 
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the transaction, the apparatus comprises a first communication 
unit connecting to the billing terminal via a first communication 
network; a second communication unit connecting to the paying 
terminal via second communication network; and a processing unit 
for processing the settlement of transaction, the processing unit 
synchronizing a communication to the billing terminal with a 
communication to the paying terminal when the processing unit sets 
up a transaction identifying number to identify the transaction, 
and when the paying terminal transmits to the settlement apparatus 
the same transaction identifying number. 

The first communication unit may connect to the billing 
terminal via at least one of the Internet, a commercial telephone 
line, and a private line, and the second communication unit connects 
to the paying terminal via radiotelephone communication. 

The first communication unit may transmit to the billing 
terminal the transaction identifying number in order to identify 
the transaction, and the processing unit may synchronize a 
communication to the billing terminal with a communication to the 
paying terminal, and the first communication unit may transmit 
to thebilling terminal a synchronizationconf irmation signal which 
indicates establishment of synchronization, when the billing 
terminal notifies the transaction identifying number to at least 
one of the paying terminal and a user of the paying terminal, and 
when the paying terminal transmits to the settlement apparatus 
the same transaction identifying number. 

The processing unit mayprocess the settlement of transaction 
between the billing terminal and the paying terminal , both of which 
are synchronized with each other by the transaction identifying 
number . 

The first communication unit may receive a purchase amount 
of the transaction from the billing terminal, and the processing 
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unit may process the settlement of the transaction for a user of 
the paying terminal based on the purchase amount that the first 
communication unit receives from the billing terminal. 

The first communication unit may receive the purchase amount 
5 of the transaction from the billing terminal; the second 

communication unit may transmit the purchase amount to the paying 
terminal so that the paying terminal confirms the purchase amount, 
and may receive a final purchase confirmation signal; the 
processing unit may perform a settlement processing after the 
10 second communication unit receives the final purchase confirmation 
signal from the paying terminal; the first communication unit may 
transmit a settlement completion notification, which notifies 
completion of the settlement processingperformed by the processing 
y1 unit to the billing terminal; and the second communication 

g 15 unit may transmit to the paying terminal a receipt which notifies 
HJ the receiving of the purchasing amount of the settlement processed 

SI by the processing unit . 

ffl The settlement apparatus described above may further 

Wi comprise a billing terminal database storing information about 

y 20 the billing terminal, the first communication unit may receive 
from the billing terminal an identifying number to identify the 
billing terminal , and the processing unit may retrieve information 
about the billing terminal from the billing terminal database and 
may confirm a registration of the billing terminal, based on the 
25 identifying number. 

The second communication unit may transmit to the paying 
terminal the information about the billing terminal , for the paying 
terminal to confirm the billing terminal, retrieved from the 
billing terminal database. 

30 The settlement apparatus described above may further 

comprise a paying terminal database which stores information about 
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the paying terminal, the second communication unit may detect a 
calling telephone number of the paying terminal , and the processing 
unit may retrieve information about a user of the paying terminal 
from the paying terminal database based on the calling telephone 
number, and the processing unit inquires at least one of a 
registration status of the user, a payment history of the user, 
and available amount of the user. 

The processing unit may retrieve at least a part of attribute 
information of the user of the paying terminal from the paying 
terminal database, and the first communication unit transmits to 
the billing terminal at least a part of the attribute information 
of the user of the paying terminal . 

When the second communication unit receives a message which 
demands a purchase history of the user of the paying terminal, 
the processing unit may retrieve the purchase history of the user 
from the paying terminal database, and the second communication 
unit may transmit the purchase history to the paying terminal . 

The processing unit may retrieve authentication information 
of the user of the paying terminal from the paying terminal database , 
and the first communication unit, for the billing' terminal to 
authenticate the user, may transmit the authentication information 
of the user to the billing terminal. The authentication 
information of the user may be a facial portrait of the user. 

The first communication unit may receive a signal requesting 
password authentication of the user from the billing terminal; 
the processing unit may retrieve information about the password 
of the user of the paying terminal from the paying terminal database ; 
the second communication unit may transmit an order of password 
request to the paying terminal and may receive a password inputted 
by the paying terminal from the paying terminal; the processing 
unit , receiving the password from the paying terminal , may inquire 
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to the information about the password retrieved from the paying 
terminal database; and the first communication unit may- 
authenticate the user by transmitting password inquiry result 
performed by the processing unit to the billing terminal. 

The processing unit may retrieve authentication information 
registered by the user of the paying terminal from the paying 
terminal database; the second communication unit may transmit a 
order to inquire the authentication information to the paying 
terminal and may receive an answer the paying terminal inputting 
corresponding to the order from the paying terminal ; and the 
processing unit may authenticate the user by verifying the answer 
received from the paying terminal against the authentication 
information retrieved from the paying terminal database. 

The first communication unit, transmitting a verifying 
result by the processing unit to the billing terminal, may notify 
an authentication result of the user to the billing terminal. 

The paying terminal database may store a plurality of 
authentication information of the user and the processing unit 
may retrieve from the paying terminal database at least one of 
the plurality of authentication information at random. 

The billing terminal database may store an authentication 
method demanded by the billing terminal and the paying terminal 
database stores an authentication method demanded by the user, 
and the processing unit may retrieve the authentication method 
demanded by the billing terminal from the billing terminal database 
and retrieves the authentication method demanded by the paying 
terminal from the paying terminal database , may select an agreeable 
the authentication method based on the authentication method 
demanded by the billing terminal and the authentication method 
demanded by the paying terminal, and may authenticate the user. 
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If an authentication accuracy of the authentication method 
demanded by the billing terminal differs from an authentication 
accuracy of the authentication method demanded by the user, the 
authentication method which has higher authentication accuracy 
may be selected for the agreeable authentication method. 

I f the authent ica t ion method demanded by the bi 1 1 i ng terminal 
does not matches with the authentication method demanded by the 
user, the processing unit may refuse to authenticate the user, 
and the second communication unit may transmit to the paying 
terminal information indicating that the authentication is 



The authentication method, demanded by at least one of the 
billing terminal and the user, may appoint at least one of visual 
authentication using facial portrait data of the user, password 
authentication using password which is the user registered for 
authentication information, and voice authentication using voice 
data the user registered. 

If the authentication method demanded by the user appoints 
refusal of the visual authentication and the authentication method 
demanded by the billing terminal appoints the authent ica t ion method 
which does not essentially requires the visual authentication, 
the processing unit may select the agreeable authentication method 
which does not includes the visual authentication. 



If the authentication method demanded by the user appoints 



refusal of the visual authentication and the authentication method 
demanded by the bill ing terminal appoints the authent ica t ion method 
which essentially requires the visual authentication, the 
processing unit may refuse authentication of the user and the second 
communication unit transmits to the paying terminal information 
indicating that the authentication is refused because the agreement 
of authentication method is not made. 



refused . 
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If the authentication method demanded by the user appoints 
addition of the password authentication, the processing unit may 
select agreeable authentication method by adding the password 
authentication to the authentication method demanded by the billing 
5 terminal . 

According to the third aspect of the present invention, a 
billing terminal performing billing of a transaction against a 
paying terminal paying for the transaction, by communicating with 
a settlement apparatus settling the transaction, may comprise a 

10 communication unit which connects to the settlement apparatus via 
a communication network, the communication unit transmitting an 
identification number to identify the billing terminal to the 
settlement apparatus and receiving from the settlement apparatus 
a synchronization confirmation signal indicating establishment 

15 of synchronization with the paying terminal ; and a processing unit 
which performs billing of the transaction. 

The communication unit may connect to the settlement 
apparatus via at least one of the Internet, a commercial telephone 
line, a private line, and radiotelephone communication. 

20 The communication unit may receive a transaction identifying 

number to identify the transaction from the settlement apparatus, 
and when the paying terminal transmits a transaction identifying 
number which is the same as the transaction identifying number 
to the settlement apparatus , and the communication unit may receive 

25 from the settlement apparatus a synchronization confirmation 
signal indicating the establishment of synchronization with the 
paying terminal, and the apparatus described above may further 
include a display unit displaying the transaction identifying 
number in order to notify the transaction identifying number to 

30 a user of the paying terminal . 



The communication unit may receive from the settlement 
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apparatus the transaction identifying number to identify the 
transaction, and when the paying terminal transmits to the 
settlement apparatus the transaction identifying number which is 
the same as the transaction identifying number, the communication 
5 unit may receive from the settlement apparatus a synchronization 
confirmation signal indicating the establishment of the 
synchronization with the paying terminal , the apparatus described 
above further includes a short range communication unit 
transmitting the transaction identifying number to the paying 
10 terminal by communicating with the paying terminal via at least 
one of an optical communication and a wireless communication. 

The settlement processing of the transact ion may be performed 
against the paying terminal synchroni zed with the billing terminal , 
when the communication unit receives from the settlement apparatus 
15 the synchronization confirmation signal indicating the 

establishment of synchronization with the paying terminal . 

The billing terminal may receive from the settlement 
apparatus a the settlement completion notification to notify a 
completion of the settlement processing when the communication 
20 unit transmits to the settlement apparatus a purchase amount of 
the transaction and the settlement apparatus performs the 
settlement processing of the transaction against a user of the 
paying terminal synchronized with the billing terminal. 



The communication unit may receive from the settlement 
25 apparatus at least a part of attribute information of the user 
of the paying terminal . 



The communication unit may receive from the settlement 
apparatus the authentication information of the user of the paying 
terminal, and the processing unit may authenticate the user based 
30 on the authentication information received from the settlement 
apparatus. The authentication information of the user may be a 
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facial portrait of the user. 

The communication unit may transmit to the settlement 
apparatus a signal to demand authentication of the user using a 
password and may receive from the settlement apparatus a result 
5 of the authentication of the user using a password when the 
processing unit is not able to authenticate the user using the 
facial portrait of the user. 

The billing terminal described above may further include 
an item choice unit by which the user of the paying terminal prompt 
10 to choose a purchasing item, the item choice unit prompting the 
user to choose an item when the communication unit receives from 
Q the settlement apparatus the synchronization confirmation signal 

gi indicating the establishment of synchronization with the paying 

S terminal; and an item sending unit through which a purchased item 

^ 15 to be sent out; the communication unit may transmit to the settlement 
%j apparatus a price of the item chosen by the user as the purchase 

1= amount of the transaction, and when the communication unit 

m receives the settlement completion notification from the 

^ settlement apparatus, the item sending unit may send out the item 

y 20 chosenby the user based on the settlement completion notification . 

According to the fourth aspect of the present invention, 
a billing terminal for performing billing of a transaction, 
communicating with a settlement apparatus performing settlement 
of the transaction against a paying terminal performing a paying 

25 of the transaction, and communicating with a computer terminal 
indicating a status of the transaction to provide information about 
the transaction, the billing terminal comprises a first 
communication unit connecting to the settlement apparatus via a 
communication network, the first communication unit transmitting 

30 an identifying number identifying the billing terminal to the 
settlement apparatus and receiving a transaction identifying 
number identifying the transaction from the settlement apparatus 
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and the first communication unit receiving from the settlement 
apparatus a synchronization confirmation signal indicating the 
establishment of synchronization with the paying terminal ; a second 
communication unit connecting to the computer terminal via the 
5 communication network , the second communication unit transmitting 
to the computer terminal for a user of the paying terminal the 
transaction identifying number in order to notify the transaction 
identifying nuiriber; and a processing unit performing billing of 
the transaction. 

10 The settlement processing of the transaction against the 

paying terminal synchronized with the billing terminal may be 
performed when the first communication unit receives from the 
settlement apparatus the synchronization confirmation signal 
indicating the establishment of synchronization with the paying 
Q 15 terminal . 

XI The second communication unit may receive from the computer 

terminal a purchase amount of the transaction, and when the first 

W communication unit transmits the purchase amount to the settlement 

apparatus and the settlement apparatus may perform the settlement 
20 processing of the transaction against a user of the paying terminal 
synchronized with the billing terminal, the first communication 
unit may receive from the settlement apparatus a settlement 
completion notification which notifies a completion of the 
settlement processing . 

25 The second communication unit, for the computer terminal 

to indicate a state of the transaction, may transmit to the computer 
terminal at least one of the synchronization confirmation signal 
and the settlement completion notification for the first 
communication unit receiving from the settlement apparatus. 

30 According to the fifth aspect of the present invention, an 

authentication apparatus for communicating with a first terminal 
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and with a second terminal demanding to authenticate a user of 
the first terminal, and performing the authentication demanded 
by the second terminal, the apparatus comprises a user database 
storing authentication information registered by a user of the 
5 first terminal; a first communication unit connecting to the first 
terminal via a first communication network; a second communication 
unit connecting to the second terminal via a second communication 
network; and a processing unit performing the authentication, the 
processing unit may set up an identifying number to identify the 

10 authentication demanded by the second terminal , and when the first 
terminal transmits the same identifying number as the identifying 
number to the authentication apparatus, synchronizes a 
communication to the first terminal with a communication to the 
second terminal; the second communication unit may receive from 

15 the second terminal an authentication demand to authenticate the 
user of the first terminal; the processing unit may retrieve from 
the user database authentication information to authenticate the 
user of the first terminal; the first communication unit may 
transmits to the first terminal an order to inquire the 

20 authentication information and receives from the first terminal 
an answer inputted by the first terminal corresponding to the order; 
the processing unit, by inquiring the answer received from the 
first terminal with the authentication information retrieved from 
the database, authenticates the user of the first terminal; and 

25* the second communication unit, by transmitting to the second 
terminal an authentication result judged by the processing unit, 
may authenticate the user of the first terminal . 

The authentication information, the processing unit 
retrieving from the database, registered by the user of the first 
30 terminal may be at least one of following data, a password of the 
user, voice data spoken by the user, facial portrait image data 
of the user, at least one of iris and retina data of the user, 
and finger print image data of the user ; and the answer the processing 
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unit receiving from the first terminal in order to inquire with 
the authentication information may be at least one of following 
data, character data, voice data, and image data. 

According to the sixth aspect of the present invention, a 
5 recording medium which stores a program for a computer, 

communicating with a billing terminal performing billing of a 
transaction and with a paying terminal performing paying of the 
transaction, and performs a settlement of the transaction, the 
program comprises a first communication module which prompts to 

10 communicate to the billing terminal via at least one of a commercial 
telephone line and a private line; a second communication module 
which prompts to communicate with the paying terminal via a 
radiotelephone communication, and a processing module which 
prompts to perform a settlement processing of the transaction, 

15 the processing module may set up a transaction identifying number 
which identifies the transaction and the processing module 
synchronizes a communication to the billing terminal with a 
communication to the paying terminal when the paying terminal 
transmits a transaction identifying number which is the same as 

20 the transaction identifying number to the computer. 

According to the seventh aspect of the present invention, 
a business method which is performed by a settler who intermediates 
a settlement of transaction while communicating with a demander 
who performs billing of a transaction and with a payer who performs 

25 paying of the transaction, comprises steps of : setting up a 

transaction identifying number of the transaction for the settler 
to identify the transaction; notifying the transaction identifying 
number to the demander; notifying the transaction identifying 
number from the demander to the payer; and performing a settlement 

30 processing of the transaction between the demander and the payer 
corresponding to each other by the transaction identifying number 
when the transaction identifying number same as the transaction 
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identifying number is notified from the payer to the settler. 

According to the eighth aspect of the present invention, 
a method of settlement using a settlement apparatus which performs 
the settlement of transaction while communicating with a billing 
5 terminal which performs billing of a transaction and with a paying 
terminal which performs paying of the transaction, the method 
comprises steps of: setting up a transaction identifying number 
to identify the transaction; transmitting the transaction 
identifying number to the paying terminal; synchronizing a 

10 communication to the billing terminal with a communication to the 
paying terminal when the paying terminal transmits the transaction 
identifying number to the settlement apparatus; transmitting a 
synchronization confirmation signal which indicates that the 
synchronization is established with the billing terminal; and 

15 performing a process of settlement of the transaction between the 
billing terminal and the paying terminal, both of which are 
synchronized with each other by the transaction identifying number, 
based on the purchase amount . 

According to the ninth aspect of the present invention, A 
20 settlement apparatus for settling a transaction while 

communicating with a billing terminal which performs billing of 
a transaction and with a paying terminal which performs paying 
of the transaction, comprises: a first communication unit 
connecting to the billing terminal via a first communication 
25 network; a second communication unit connecting to the paying 
terminal via a second communication network; and a processing unit 
performing the settlement processing of the transaction. The 
processing unit setting up a transaction identifying number to 
identify the transaction performed by the paying terminal, and 
30 the settlement apparatus synchronizing a communication to the 
billing terminal with a communication to the paying terminal when 
the billing terminal transmits to the settlement apparatus the 
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same transaction identifying number. 

The first communication unit may transmit the transaction 
identifying number to identify the transaction to the paying 
terminal ; and the processing unit may synchroni ze the communication 
5 to the billing terminal with the communication to the paying 
terminal when the paying terminal transfers the transaction 
identifying number to the billing terminal and the billing terminal 
transmits the same transaction identifying number as the 
transaction identifying number to the settlement apparatus, and 
10 the first communication unit transmits a synchronization 
confirmation signal indicating the establishment of 
synchronization with the billing terminal. 

0"! The processing unit may perform the settlement processing 

i = I 

Q of the transaction between the billing terminal and the paying 

15 terminal synchronized with each other by the transaction 
identifying number. 

ro According to the tenth aspect of the present invention, a 

nj billing terminal , communicating with a settlement apparatus which 

~ performs a settlement of a transaction, and performing billing 

20 of the transaction against a paying terminal which performs paying 
of the transaction, the billing terminal comprises : a communication 
unit which connects to the settlement apparatus via a communication 
network, the communication unit transmitting an ident i f ying number 
to identify the transaction transferred from the billing terminal , 
25 the communication unit receiving from the settlement apparatus 
a synchronization confirmation signal indicating an establishment 
of synchronization with the paying terminal which performs the 
transaction identified by the transaction identifying number; and 
a processing unit which performs billing processing of the 
30 transaction. 

The billing terminal described above may further include 
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a pattern code read in unit which read in a pattern code patterning 
the transaction identifying number at least one of a barcode and 
a cyber code displayed on the paying terminal and retrieves the 
transaction identifying number. The communication unit may 
5 transmit to the settlement apparatus the transaction identifying 
number retrieved from the pattern code read in unit and receives 
from the settlement apparatus the synchronization confirmation 
signal indicating establishment of synchronization with the paying 
terminal performing transaction identified by the transaction 
10 identifying number. 

The billing terminal further includes a short range 
communication unit communicating with the paying terminal via at 
least one of an optical communication and a wireless communication 
pi and receiving the transaction identifying number from the paying 

Q 15 terminal. The communication unit transmits the transaction 
'f~ identifying number to the settlement apparatus and receives from 

%I the settlement apparatus the synchronization confirmation signal 

Q indicating establishment of synchronization with the paying 

^ terminal performing the transaction identified by the transaction 

fy 20 identifying number. 

When the communication unit receives from the settlement 
apparatus the synchronization confirmation signal indicating 
establishment of synchronization with the paying terminal, the 
processing unit may perform billing of the transaction against 
25 the paying terminal synchronized with the billing terminal. 

This summary of the invention does not necessarily describe 
all necessary features of the present invention. The present 
invention may also be a sub-combination of the above described 
features . The above and other features and advantages of the 
30 present invention will become more apparent from the following 
description of embodiments taken in conjunction with the 
accompanying drawings . 
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BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a block diagram showing a configuration of an 
5 electronic settlement system of a first embodiment of the present 
invention . 

Fig. 2 shows a configuration of a cashier terminal 10. 
Fig . 3 shows a configuration of a cellular phone as an example 
of a user terminal 20. 
10 Fig. 4 is a schematic diagram showing a configuration of 

a synchronizing server 30. 

Fig. 5 is a flow chart showing a settlement processing in 
an electronic settlement system of the first embodiment. 

Fig. 6 is a flow chart showing cashier terminal information 
15 inquiry 104 processing. 
□ Fig. 7 is a flow chart showing a transaction ID inquiry 116 

processing. 

Fig. 8 is a flow chart showing a user data inquiry 128 
Q processing. 

^ 20 Fig. 9 shows a flow chart of a visual authentication 132 

ry processing, 

S Fig. 10 is a flow chart showing an available amount checking 

136 processing. 

Fig . 11 is a flow chart showing a final purchase confirmation 
25 140 processing. 

Fig . 12 shows an example of information indicated on a display 
unit 702 of a cashier terminal 10. 

Fig . 13 shows examples of information indicated on a display 
unit 802 of a user terminal 20. 
30 Fig. 14 shows an example of cashier terminal information 

6000 stored in a cashier database 50. 

Fig. 15 shows an example of user information 6010 stored 
in a user database 60. 

Fig. 16 shows an example of an attribute information file 
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6020 . 

Fig. 17 shows an example of a history file 6030, 

Fig . 18 shows an example of an authentication data file 6040 . 

Fig. 19 explanatorily shows an example of an authentication 
5 method stored in an authentication method field of cashier terminal 
information 6000 . 

Fig, 20 explanatorily shows an example of an authentication 
method stored in an authentication method field of user information 
6010 , 

10 Fig. 21 explanatorily shows an authentication method agreed 

between the cashier terminal 10 and the user terminal 20 based 
on the authentication method appointed by the cashier terminal 

^ 10 and the authentication method appointed by the user terminal 

5 20. 

15 Fig. 22 is a flow chart showing an electronic settlement 

system of a second embodiment of the present invention. 

Ln Fig. 23 is a flow chart showing cashier terminal information 

inquiry 104 processing. 

O Fig. 24 is a flow chart showing a user data inquiry 128 

p 20 processing. 

Ir Fig. 25 is a flow chart showing a user authentication 135 

Q processing. 

Fig. 26 is a flow chart showing a user authentication 7006 
processing which additionally performs a password authentication 
25 after a visual authentication. 

Fig. 27 is a flow chart showing a password authentication 
7014 processing. 

Fig. 28 shows a configuration of a cashier terminal 10 
applying a third embodiment. 
30 Fig. 2 9 shows an example of a code indication on a display 

unit 802 of a user terminal 20. 

Fig. 30 shows an example of a cyber code indication on a 
display unit 802 of a user terminal 20. 

Fig. 31 is a flow chart showing an electronic settlement 
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system applying the third embodiment of the present invention. 

Fig. 32 is a flow chart showing a transaction ID inquiry 
116 processing. 

Fig. 33 is a block diagram showing a configuration of an 
5 electronic settlement system applying the fourth embodiment of 
the present invention. 

Fig. 34 shows a configuration figure of a vending machine 

16 . 

Fig. 35 is a flow chart showing a settlement processing in 
10 an electronic settlement system applying the fourth embodiment 
of the present invention. 

Fig . 3 6 shows examples of information indicated on a display 
unit 802 of a user terminal 20. 

Fig. 37 is a block diagram showing a configuration of an 
15 electronic settlement system applying the fifth embodiment of the 
present invent ion . 

Fig, 38 is a flow chart showing a settlement processing in 
an electronic settlement system applying the fifth embodiment of 
the present invention. 
20 Fig. 3 9 is a flow chart showing cashier information inquiry 

508 processing. 

Fig. 4 0 is a flow chart showing a cashier number inquiry 
528 processing. 

Fig. 41 is a flow chart showing a user information inquiry 
25 536 processing. 

Fig. 42 is a flow chart showing a password authentication 
538 processing. 

Fig. 43 shows examples of information displayed on a user 
computer 22 . 

30 Fig. 44 shows a block diagram showing hardware architecture 

of a general -purpose computer 600. 

Fig. 45 is a block diagram showing a functional architecture 
of software executed on a CPU 602. 
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DETAILED DESCRIPTION OF THE INVENTION 



The invention will now be described based on the preferred 
embodiments, which do not intend to limit the scope of the present 
5 invention, but exemplify the invention. All of the features and 
the combinations thereof described in the embodiment are not 
necessarily essential to the invention. 

(First embodiment) 

10 An electronic settlement system applying the first 

embodiment of the present invention will be explained as follows. 
Applying the electronic settlement systemof the present embodiment , 
when a consumer purchases an item and pays its expense , the consumer 
may execute a settlement electronically via a network. The 

15 customer is referred to as a user in the following. 

Fig. 1 is a block diagram showing a configuration of an 
electronic settlement system of the present embodiment. The 
electronic settlement system of the present embodiment has a 
cashier terminal 10 as an example of a billing terminal, a user 
20 terminal 20 as an example of a paying terminal, a synchronizing 
server 3 0 as an example of a settlement device, a carrier server 
40 , a cashier database 5 0 as an example of a billing terminal database , 
a user database 6 0 as an example of a paying terminal database, 
and a user account database 70 . 

25 A transmission line 18, which is a communication path to 

connect the cashier terminal 10 with the synchronizing server 30, 
may be either a commercial telephone line or a private line. A 
radio communication channel 28 is a transmission path of a 
radiotelephone communication to connect a user terminal 20 with 

30 a carrier server 40. A transmission path 38 is a communication 
path to connect the carrier server 40 with the synchronizing server 
30, and may be either a commercial telephone line or a private 
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The cashier terminal 10 calculates a purchase amount of items 
that the user purchased in the retailer's shop, and charges the 
user the purchase amount . Fig. 2 shows a configuration of a cashier 
terminal 10. The cashier terminal 10 has a user-side indicating 
unit 700, a clerk-side indicating unit 702, a cashier body 704, 
a synchronization indicator 706, and an infrared communicating 
unit 708 . The cashier terminal 10 also has a communicating function 
connecting to the synchronizing server 30 via a commercial 
telephone line or a private line, which is not shown in the figure. 

The user-side indicating unit 700 has a display screen on 
the opposite side to the clerk which is a back side of the cashier 
terminal 10 made with liquid crystal or LCD in order to display 
character information. The user-side indicating unit 700 
displays a purchase amount, a "transaction ID" described in 
following, and so on, and notifies information to the user. The 
clerk-side indicating unit 702 indicates a process calculating 
purchase amount , an electronic settlement process , and so on. The 
synchronization indicator 706 is a light that glows in order to 
indicate an establishment of "synchronizing status", which is 
described in the following, when the synchronization is established 
The infrared communicating unit 708 communicates data via infrared 
communication to an infrared communication unit 808 of the user 
terminal 20. 

The user terminal 20 directs the user to pay a value of the 
merchandise using credit means such as a credit card or a bankcard. 
An example of the user terminal 2 0 is a radiotelephone communication 
means such as a cellular phone. Another example of the user 
terminal 20 is a portable terminal such as a PDA or a notebook 
type personal computer and so on, which may communicate by 
connecting to a radio communication means such as a cellular phone . 
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Fig . 3 shows a configuration of a cellular phone as an example 
of a user terminal 20. The user terminal 2 0 has an antenna 800, 
a display unit 802 , a console unit 804 , a keypad 806, and an infrared 
communication unit 808. The user terminal 20 communicates to the 
carrier server 4 0 through the antenna 800 via a radio communication 
channel 28. The user terminal 20 has a data packet communication 
facility and may transmit and receive digital data. The display 
unit 802 displays character information and image information 
transmitted and receivedby the data packet communication f acil i ty . 
Using the console 804, a menu or buttons displayed on the display 
unit 802 is selected. The keypad 806 provides buttons to input 
telephone numbers, a password, and so on. Using the infrared 
communication unit 808, data is transmitted to the infrared 
communicating unit 708 of the cashier terminal 10. 

The user terminal 2 0 connects to the carrier server 4 0 via 
the radio communication channel 28 . The carrier server 4 0 connects 
to the synchronizing server 30 via the transmission line 38. 
Therefore , the user terminal 20 communicates with the synchronizing 
server 3 0 . 

The synchronizing server 30 performs a settlement processing 
in a transaction between the retailer and the user. The 
synchronizing server 3 0 connects to the cashier database 50 for 
accumulating information from the cashier terminal 10, the user 
database 60 for accumulating information from the user terminal 
20, and the user account database 70 for accumulating information 
of the credit account or the bank account of users; and searches 
each database and retrieves the information. The synchronizing 
server 30, the cashier database 50, the user database 60, and the 
user account database 70 may be arranged in a network of a credit 
company or a bank network . However , only the user account database 
70 may be arranged in the network of a credit company or the bank 
network whereas the synchronizing seirver 3 0 may be connected to 
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the user account database 70 via the private line. 



The synchronizing server 30 connects to the cashier terminal 
10 and the user terminal 20, and performs data communication there 
among . The cashier terminal 10 does not directly communicate with 
the user terminal 20. 

The synchronizing server 3 0 acquires information about the 
billing of a commodity transaction by communication to the cashier 
terminal 10, acquires information about the paying of a commodity 
transaction by communication to the user terminal 20, and processes 
the settlement in transactions between the cashier terminal 10 
and the user terminal 2 0 by synchronizing the communication to 
the cashier terminal 10 with the communication to the user terminal 
20 . 

Fig. 4 is a configuration figure of the synchronizing server 
30. The synchronizing server 30 has a settlement processing unit 
80, a first communication unit 82 for processing data 
communications via the transmission line 18 , a second communication 
unit 84 for processing data communications via the transmission 
line 38 and the radio communication channel 28, a cashier database 
50, and a database retrieving unit 86 which accesses the user 
database 60 and the user account database 70 and retrieves 
information from those databases. 

A configuration of a "synchronizing settlement" and a 
"synchronizing authentication" using the electronic settlement 
system of the present embodiment is described as follows. 

A "synchronizing settlement" is a method that does not 
directly communicate between the cashier terminal 10 and the user 
terminal 2 0 , but rather processes a transaction settlement between 
the cashier terminal 10 and the user terminal 20, by synchronizing 
communication in real-time between the cashier terminal 10 and 
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the user terminal 20 via the synchronizing server 30 which 
communicates with both the cashier terminal 10 and the user terminal 
20 . 



5 settlements are performed between a plurality of cashier terminals 
10 and a plurality of user terminals 20, Accordingly, the 
synchronizing server 30 specifies the cashier terminal 10 billing 
a certain transaction and the user terminal 20 paying for the 
transaction, and then synchronizes the communication between the 
10 cashier terminal 10 and the user terminal 20, so that it processes 
the transaction of settlement between the cashier terminal 10 and 
the user terminal 20. 

In order to synchronize the communication to the cashier 
terminal 10 with the communication to the user terminal 20, a 

15 transaction ID is defined as an example of a transaction identifying 
number in order to identify a certain transaction. Whenever a 
cashier terminal 10 connects to and communicates with the 
synchronizing server 30, the synchronizing server 30 defines a 
transaction ID, and transmits it to the cashier terminal 10. The 

20 cashier terminal 10 indicates the transaction ID received from 
the synchronizing server 30 on a user-side indicating unit 700, 
and shows the user the transaction ID. 

The user, using the user terminal 20, inputs the shown 
transaction ID, and transmits the transaction ID to connect to 

25 the synchronizing server 30. If the transaction ID received from 
the user terminal 2 0 matches a transaction ID of one of the plurality 
of cashier terminals 10 which have already issued transaction ID, 
the synchronizing server 30 allows the user terminal 20 to 
synchronize with the cashier terminal 10 and to communicate with 

30 each other. If a matching transaction ID is not able to be found, 
the user terminal 20 is not allowed to synchronize with any cashier 
terminals 10. Thus, for a certain transaction identified by the 



In the electronic settlement system, transaction 
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transaction ID, the synchronizing server 30 specifies the cashier 
terminal 10 billing the transaction and the user terminal 20 paying 
for the transaction by means of the transaction ID, synchronizes 
the communication between the cashier terminal 10 and the user 
5 terminal 20, and processes the settlement. Therefore, the 
settlement of transactions is performed between the cashier 
terminal 10 and the user terminal 2 0 without a direct communication 
therebetween , 

A system of a "synchronizing authentication" will be 
explained in the following. Here, as an example, a case where 
a clerk using a cashier terminal 10 authenticates if the user of 
a user terminal 2 0 is the owner of the user terminal 20, will be 
explained. A "synchronizing authentication" is an authentication 
method where the cashier terminal 10 authenticates the user of 
the user terminal 2 0 by synchronizing a communication to the cashier 
terminal 10 with that to the user terminal 20 via the synchronizing 
server 30, which communicates with both the cashier terminal 10 
and the user terminal 20. But the cashier terminal 10 does not 
communicate to the user terminal 20 directly, and the user terminal 
20 does not communicate with the cashier terminal 10 directly. 
Between the cashier terminal 10 and the user terminal 20, 
information about the authentication is not transmitted directly 
to each other. 

A cellular phone, as an example of a user terminal 20, has 
25 a predetermined calling telephone number unique for each cellular 
phone, so that the predetermined calling telephone number is used 
with every dialing. The calling telephone number is unique to 
each cellular phone, and any other cellular phone is not able to 
make a phone call with the same calling telephone number . Therefore, 
30 as long as the original owner uses a certain cellular phone, the 
calling telephone number of a cellular phone may be used for 
specifying a user identification. That is, a cellular phone may 
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work as an ID like a driving license. 

Concerning a case where the owner of a cellular phone lost 
his or her cellular phone and someone else uses the lost cellular 
phone , the cellular phone maybe uniquely specif ied with the calling 
5 telephone number, but the user of the cellular phone may not be 
specified to the owner of the cellular phone. The electronic 
settlement system stores data corresponding to a calling telephone 
number of each cellular phone with the information of the owner 
of each cellular phone in the user database 60, and authenticates 
10 if the user of a cellular phone is the actual owner. 

When the synchronizing server 3 0 connects to the user 
terminal 20, the synchronizing server 30 detects a calling 
Pi telephone number of the user terminal 20, retrieves the user 

p database 60 based on the calling telephone number, extracts 

{1; 15 information about the user, and authenticates the user. There 
Nl are several types of authentication method, such as visual 

Q authentication, password authentication, voice authentication, 

^ and so on. These authentication methods may be combined with each 

ry other. 

20 When using a visual authentication, the synchronizing server 

3 0 retrieves a facial portrait data of the user from the user database 
60, transmits to the cashier terminal 10, and prompts the clerk 
to authenticate if the user is the original owner. When using 
the password authentication, the synchronizing server 30 retrieves 

25 password information from the user database 60, transmits a 

password demanding instruction to the user terminal 2 0 , and prompts 
the user to input the password from the user terminal 2 0 and to 
transmit the password to the synchronizing server 30. The 
synchronizing server 3 0 inquires about the transmitted password 

30 and the password registered in the user database 60, and transmits 
an authentication result to the cashier terminal 10. When using 
the voice authentication, in place of a password, voice data where 
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the user speaks a predetermined word is recorded in a database 
in advance, the synchronizing server 30 prompts the user to input 
the vocalized voice data of the registered word from the user 
terminal 20, and prompts the user to transmit to the synchronizing 
5 server 30. 

Furthermore, when the visual authentication alone is not 
enough, an accuracy of the authentication can be improved by 
multiple authentications combined with another authentication 
method such as the password authentication. 

10 Applying the "synchronizing authentication", the cashier 

terminal 10 and the user terminal 20 do not communicate directly 
with each other. Thus, secret information such as a password is 
not sent between the cashier terminal 10 and the user terminal 
20. The synchronizing server 30, which communicates with both 

15 the cashier terminal 10 and the user terminal 20, mediates the 
authentication processing. Thus, the clerk who uses the cashier 
terminal 10 can authenticate the user who uses the user terminal 
20 indirectly. Therefore, the user, without telling security 
information such as a password to the clerk, nor transmitting 

20 password data and so on from the user terminal 2 0 to the cashier 
terminal 10, can authenticate himself or herself. The 
authentication of the user can be performed without a leak of the 
user's personal information. In case the data sent between the 
user terminal 20 and the synchronizing server 30 is stolen by 

25 wiretapping and so on, for example, because the personal 
information is not sent at all, no problem occurs. 

Combining the "synchronizing settlement" with the 
"synchronizing authentication" may realize in an electronic 
settlement system that ensures security, privacy protection, and 
30 a reliability at high level. Furthermore, a cellular phone or 
a portable terminal connecting for data communication with a 
cellular phone and so on has a portability, that is the user may 
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take the terminal anywhere, and a simplicity, that is the user 
may communicate with a network via radio telephone communication 
from anywhere . Therefore, an electronic settlement system of the 
present embodiment enables to realize an electronic settlement 
with high reliability, security, and convenience. 

Referring to Fig. 5 to Fig. 13, processing of the electronic 
settlement in which a user settles a payment with the electronic 
settlement system of the present embodiment using a user terminal 
is described as follows . Fig . 5 is a flow chart showing a settlement 
processing in an electronic settlement system of the first 
embodiment. Fig. 5 is a flow chart showing the settlement 
processing between the cashier terminal 10, the user terminal 20, 
and the synchronizing server 3 0 in chronological order. 
Information interaction between the cashier terminal 10, the user 
terminal 20, and the synchronizing server 30 is indicated using 
arrows in a lateral direction. Fig. 6 to Fig. 11 are flow charts 
showing processing of details in Fig. 5. Fig. 12 is an example 
of information displayed on the clerk- side indicating unit 702 
of a cashier terminal 10. Fig. 13 is an example of information 
displayed on a display unit 802 of a user terminal 20. 

In the following, except a case where special notification 
is made, the interaction of information between the cashier 
terminal 10 and the synchronizing server 30 is performed via a 
communication line 18, and the interaction of information between 
the user terminal 20 and the synchronizing server 30 is performed 
via a radio communication channel 28 and a communication line 38. 
An access method from the cashier terminal 10 to the synchronizing 
server 30 may be either a method of a dial up access from the 
commercial telephone line or a method of access to a server gate 
via a private line. An access method from the user terminal 20 
to the synchronizing server 30 is, when the user uses a cellular 
phone as a user terminal 20, performed via a radiotelephone 
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communication . 

Referring to Fig, 5, the settlement processing is described 
in the following. A user purchases an item from a retailer, and 
pays the value of the merchandise at a cashier over the counter. 
5 First, the user chooses an electronic settlement. The clerk, at 
the user ' s request of electronic settlement , chooses the electronic 
settlement menu on the cashier terminal 10, and the electronic 
settlement starts (100) . The cashier terminal 10 accesses the 
synchronizing server 30 (102) . The cashier terminal 10 transmits 
10 a cashier registration number which is unique to each cashier 
terminal when the cashier terminal 10 accesses the synchronizing 
server 30 . 

The synchronizing server 30, corresponding to access from 
the cashier terminal 10, starts to connect the cashier terminal 
15 10, and inquires the cashier terminal information based on the 
cashier registration number transmitted from the cashier terminal 
10 (104) . 

Referring to Fig , 6, the cashier terminal information inquiry 
104 processing will be described. The synchronizing server 3 0 

20 accesses the cashier database 50 (1042) and retrieves the cashier 
terminal information of a cashier terminal matching to the cashier 
registration number (1044) . A name of a retailer, a name of a 
shop, an authentication method, and so on are registered in the 
cashier terminal information. The authentication method may be 

25 chosen from a visual authentication method, a password 
authentication method, and so on. The cashier terminal 
information includes authentication methods to be used. The 
synchronizing server 3 0 decides to adopt the authentication method 
registered in the cashier terminal information (1046) . Here, a 

30 case in which it was decided that a visual authentication method 
is tobe adoptedas an authentication method is describedas follows . 
Furthermore, the synchronizing server 3 0 allocates a transaction 
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ID to the cashier terminal 10 (1048) . The transaction ID is a 
number for identify the settlement which is going to be processed 
by the cashier terminal 10 . 

The transaction ID may be a sequence of numbers , for example , 
5 created by random nunaber generation. For convenience of input 
from the user terminal 20, the transaction ID is preferably the 
smallest digit possible. On the other hand, the same cashier 
terminal identifying number could be allocated on a plurality of 
cashier terminals 10 or user terminals 20; in such a case, the 
10 synchronizing server 3 0 is not able to correspond a cashier terminal 
10 to the user terminal 20 for the transaction. For that reason, 
the transaction ID is allocated in the way that the same transaction 
~^ ID does not be used twice or more in a predetermined period. On 

the other hand, the same transaction ID may be used again after 
O 15 the predetermined period. Thus, without increasing the digits of 
fi^ the transaction ID, uniqueness of the transaction ID may be 

''--^ maintained. 

^ The synchronizing server 30 further has a function that 

flJ limits the allocation of a transaction ID, which does not issue 

~ 20 a transaction ID the same as the transaction ID on the "access 

wait" status; so that prevention of competition of a transaction 

ID is ensured. 

When a retailer has two or more branches, transaction IDs 
created by random number generation may compete with each other. 
25 In such a case , in order to avoid the competition of numbers allocated 
by two or more branches, the range of the generated random numbers 
for transaction IDs allocated to each branch may be limited. 

Therefore, a transaction ID, even though it is a number for 
identifying transactions, does not need to be a large digit number 
30 such as a purchase ID, which is a number unique to every transaction; 
but needs to be a digit small enough to keep the uniqueness only 
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for a certain period. 

Referring back to Fig. 5, processing after the cashier 
terminal information inquiry 104 will be described in the following 
The synchronizing server 30 delivers the transaction ID to the 
5 cashier terminal 10 (106) . Here, the synchronizing server 30 is 
on an "access wait" status that is waiting for the user terminal 
20 to access using this transaction ID. On the other hand, the 
cashier terminal 10 that delivered the transaction ID is defined 
as being on a "synchronization waiting" status. 

10 The cashier terminal 10 displays the transaction ID 

transmitted from the synchronizing server 30 on a user-side 
indicating unit 700 (108) . The cashier terminal 10 displays 
information shown in Fig. 12 (a) , so that not only the transaction 
ID, but also the user terminal is on the "synchronization wait" 

15 status which waits while the user terminal accesses the 

synchronizing server 30 using the transaction ID, is indicated. 
The clerk notifies the transaction ID displayed on the cashier 
terminal 10 to the user (110) . The clerk may orally tell the user 
the transaction ID. Alternatively, the clerk may show the 

20 transaction ID displayed on the user-side indicating unit 700 of 
the cashier terminal 10. 

The clerk may cancel the settlement processes by choosing 
"cancel" from the information displayed as in Fig. 12 (a) . This 
cancel processing may be used when the user terminal 20 is not 
25 able to access the synchronizing server 3 0 because of poor radio 
conditions and so on, or the transmission is performed normally, 
but the synchronizing server 30 is not able to establish the 
synchronization even though the transaction ID is transmitted from 
the user terminal 20. 

30 Information for inputting a "transaction ID" as shown in 

Fig. 13 (a) is displayed on the user terminal 20. The user inputs 
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the transact ion ID notified from the clerk (112) . The user chooses 
the "transaction ID" of input information, and the transaction 
ID is transmitted to the synchronizing server 30 (114) . The user 
may choose "cancel" in this processing to cancel the settlement 
processing and finish the processing. This cancellation 
processing may be used in a case where the settlement processing 
may not be performed even when inputting a transaction ID correctly, 
caused by a communicating disorder and so on. 

The synchronizing server 30 receives the transaction ID 
transmitted from the user terminal 20, and makes an inquiry to 
the transaction ID (116) . 

A "synchronization" of the cashier terminal 10 with the user 
terminal 20 produced by the inquiry of the transaction ID is 
described in the following. First, the synchronizing server 30 
is on an "access wait" status, which is waiting to be accessed 
by the user terminal 20 and waiting for the transaction ID to be 
sent. On this "access wait" status, if a user terminal 20 using 
the same transaction ID to be allocated to the cashier terminal 
10 accesses, the synchronizing server 30 establishes one to one 
"synchronization" status between that cashier terminal 10 and the 
user terminal 20, and realizes a synchronization of the 
communication to the cashier terminal 10 with the communication 
to the user terminal 20. Access from a plurality of the user 
terminals 2 0 does not be matched to one cashier terminal 10 for 
one transaction ID. 

A time out limit is set up for the "access wait" status of 
the synchronizing server 30, and limits the access wait period 
with the user terminal 20 to a predetermined length, for example, 
3 minutes. When no answer from the user terminal 20 is obtained 
for the transaction ID issued for a predetermined period, the 
synchronizing server 30 shuts down the connection to the cashier 
terminal 10, and initializes it. This time out function is set 



NI-0005 




up in order to avoid trouble for cases where a user cancels the 
processing or that a communicating condition of the user terminal 
20 with the synchronizing server 30 is poor so that data 
communication is not able to be performed normally, and so on. 

5 Referring to Fig. 7, the transaction ID inquiry 116 

processing is described. As shown in Fig. 7, the synchronizing 
server 30 on the "access wait" status checks if access from the 
user terminal 20 has existed, and if a transaction ID confirming 
signal has been sent from the user terminal 20 (1162) . If there 

10 has been no access, it checks if it exceeds the time out limit 
(1164), in case it exceeds, shuts the connection to the cashier 
terminal 10 down (1166) , and finishes the processing. Then, 
information shown in Fig. 12 (b) , which indicates the forced 
termination of the connection, is displayed on the cashier terminal 

15 10 . 

When the user terminal 20 transmits the transaction ID, it 
is checked whether a cashier terminal 10 on the "synchronizing 
wait" status corresponding to that transaction ID is found (1168) , 
if not, it transmits a synchronizing error message to the user 

20 terminal 20 (1170) . The user terminal 20 displays the 

synchronizing error message shown in Fig. 13 (b) on the display 
(1172). If the user chooses "OK" here, it goes back to the 
processing 112 , the user terminal 20 displays the information shown 
in Fig. 13 (a) again, and re- input of the transaction ID is prompted 

25 to the user. 

When a cashier terminal 10, which corresponds to the 
transaction ID transmitted from the user terminal 20, is found 
and is on the "synchronizing wait " status, the synchronizing server 
30 establishes a "synchronizing" status of the cashier terminal 
30 10 with the user terminal 2 0 and synchronizes the communication 
to the cashier terminal 10 with the communication to the user 
terminal 20 (1174) . 
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Referring back to Fig, 5 again, when the synchronization 
is established, the synchronizing server 30 sends a synchronizing 
signal to the cashier terminal 10 (118) , The cashier terminal 
10 receives the synchronizing signal from the synchronizing server 
5 30 and lights a synchronization indicator 706 in the cashier 
terminal 10 (120) . With this indicator, the clerk may tell if 
the synchronization is established. 

When the synchronization is started, the synchronizing 
server 30 sends to the user terminal 20 the cashier terminal 

10 information retrieved from the cashier database 50 in the cashier 
terminal information inquiry 104. The user terminal 20 displays 
the information shown in Fig , 13 (c) , and prompts the user to confirm 
the synchronized cashier terminal (124) . When the user chooses 
"cancel", the processing goes back to the input of the transaction 

15 ID 112 processing , This cancellation is used when the user inputted 
an incorrect transaction ID and synchronizes with an incorrect 
cashier, so that the settlement processing needs to be canceled 
and so on. 

When the user chooses "OK" in Fig. 13 (c) displayed on the 
20 user terminal 20 and confirms the cashier terminal information, 
the user terminal 20 transmits a cashier terminal information 
confirmation signal to the synchronizing server 3 0 (126) . The 
synchronizing server 30, receiving the cashier terminal 
information confirmation signal transmitted from the user terminal 
25 20, performs the user information inquiry 128 processing. 

Referring to Fig. 8, the processing of the user data inquiry 
128 will be described. The synchronizing server 30 retrieves a 
user terminal number from a user terminal 20 (1280) . When the 
user terminal 20 is a cellular phone, a user terminal number is 
30 the calling telephone number. The synchronizing server 30 

accesses the user database 60 (1282) and checks if the user terminal 
20 is registered based on the user terminal number (1284) . When 
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the user terminal is not registered, the synchronizing server 30 
transmits to the user terminal 20 a message "you are not registered . 
" (1286) . Information, notifying that the user does not have user 
registration, shown inFig. 13(d) , is displayed on the user terminal 
5 20. The synchronizing server 30 releases the synchronization of 
thecashier terminal 10 withtheuserterminal 20 (1290) andfinishes 
the processing. 

The synchronizing server 3 0 may detect the calling telephone 
number of the user terminal 20 when the user chooses the 

10 synchronizing settlement menu in the user terminal 20 and the user 
terminal 20 makes the first access to the synchronizing server 
30. In another case, the synchronizing server 30 may detect the 
calling telephone number of the user terminal 20, when the user 
inputs the transaction ID to the user terminal 20 and the user 

15 terminal 20 transmits the transaction ID to the synchronizing 
server 30. 

When the user registration is verified, user data is 
retrieved from the user database 6 0 (12 92) . Information about 
the payment history of the user is recorded in the user data. If 

20 the user has a problem with his or her payment history on his or 
her credit card or his or her bankcard and so on, it is checked 
based on the information (12 94) . When any problem is found in 
his or her payment history, a message "we cannot accept your access . " 
is transmitted to the user terminal 20 (1296) . Information 

25 notifying that settlement is rejected, shown in Fig. 13 (e) , is 
displayed on the user terminal 20. The synchronizing server 30 
releases the synchronization of the cashier terminal 10 with the 
user terminal 20 (1298) and finishes the processing. 

When the user has no problem with his or her credit history, 
30 the synchronizing server 30 advances to the next processing. 
Referring back to Fig. 5, the synchronizing server 30 performs 
a "synchronizing multiple authentication" based on the cashier 
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terminal information inquiry 104. The synchronizing multiple 
authentications is an authentication having a plurality of 
authentication stages and isperformed between the cashier terminal 
10 and the user terminal 20 . The synchronizing server 30 performs 
5 the synchronizing multiple authentications after the 

synchronization is established with both the cashier terminal 10 
and the user terminal 20. Between the cashier terminal 10 and 
the user terminal 20, information for authentication is not sent 
directly to each other, but the information for authentication 

10 is sent between the cashier terminal 10 and the synchronizing server 
30, and between the user terminal 20 and the synchronizing server 
30. Because the synchronizing server 30 intermediates the 
authentications, the clerk may authenticate the user of the user 
terminal 20 with no exchange of personal information between the 

15 user and the clerk. 

The synchronizing multiple authentication processing is 
described in a case where the visual authentication is adopted 
in the cashier terminal information inquiry 104. The 
synchronizing server 30 retrieves a user facial portrait image 
20 from the user database 60 in the user information inquiry 12 8, 
and transmits the facial portrait image data to the cashier terminal 
10 (130) . The cashier terminal 10 receives the user facial portrait 
image data from the synchronizing server 30 , and performs the visual 
authentication (132) . 

25 Fig. 9 shows the visual authentication 132 processing. The 

cashier terminal 10 displays a facial portrait image of the user 
(1320) . Fig. 12 (d) shows an example of information displayed 
on the cashier terminal 10. The clerk verifies the user and the 
displayed facial portrait, and authenticates the user (1322). 

30 When the clerk is not able to ensure the user authentication or 
the payment is expensive, the clerk chooses "DOUBT" as displayed 
in Fig. 12 (d) , and the cashier terminal 10 transmits a DOUBT signal 



NI-0005 




to the synchronizing server 30 (1324) . In this case, the cashier 
terminal 10 displays information that shows the password 
authentication is being processed such as shown in Fig. 12 (e) . 
When the clerk chooses "OK" as displayed in Fig. 12 (d) , the visual 
5 authentication 132 processing is completed. 

In order to perform the password authentication, the 
synchronizing server 30, receiving the "DOUBT" signal from the 
cashier terminal 10, retrieves data necessary for authentication 
from the user database 60 and generates authentication data (1326) . 

10 The synchronizing server 30 initializes a password require count 
variable n, which stores the password require count, to 0 (1328) . 
The synchronizing server 30 increments n to n+1 (1330) andtransmits 
a password request message to the user terminal 20 (1332). 
Information shown in Fig. 13 (f ) is displayed on the user terminal 

15 20. The user inputs the password (1334) . The user terminal 20 
transmits the password input by the user to the synchronizing server 
3 0 (133 6) . The synchronizing server 3 0 receives the password 
transmitted from the user terminal 20 and verifies the password 
(1338) . 

20 When the password transmitted from the user terminal 2 0 is 

incorrect, it is checked whether the required password count n 
is 2 or more (1340) , if not, it goes back to the processing of 
1330 and requests the password again. If the required password 
count n is 2 or more, an invalid message is transmitted to the 

25 user terminal 20 (1344) . Because the authentication is not 

confirmed, information shown in Fig. 13(g) that the settlement 
service is not available is displayed on the user terminal 20 (1346) . 
On the other hand, an invalid message is transmitted to the cashier 
terminal 10 (1342) . The cashier terminal 10 displays the 

30 information indicating that the password authentication is invalid 
(1350), and finishes the processing. The synchronizing server 
30, after sending the invalid message to the user terminal 20 and 
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the cashier terminal 10, releases the synchronization of the 
cashier terminal 10 with the user terminal 20 (1348) . 

In the password inquiry 1338 of the password authentication, 
if the synchronizing server 3 0 confirms the password, the 
5 synchronizing server 30 transmits to the cashier terminal 10 a 
password authentication OK signal (1348) . The cashier terminal 
10 displays information shown in Fig. 12 (f) indicating the 
completion of the password authentication (1350) , and the visual 
authentication processing 132 is finished. 

10 Referring back to Fig. 5, after the cashier terminal 10 

finishes the visual authentication processing 132, the cashier 
terminal 10 transmits to the synchronizing server 30 purchase 
amount information, including the total purchase (134) amount. 
The synchronizing server 30, receiving the purchase amount 

15 information from the cashier terminal 10 , performs available amount 
check processing 136. 

Referring to Fig . 10 , the processing of the available amount 
checking 136. will be described as follows. The synchronizing 
server 3 0 compares the purchase amount transmitted from the cashier 

20 terminal 10 with the available amount limit retrieved from the 
user database 60 in the user data inquiry 128 (1362) . If the 
purchase amount does not exceed the available amount limit, the 
inquiry processing is finished. If the purchase amount exceeds 
the available amount limit, a message "your purchase exceeds your 

25 available amount limit" is transmitted to the user terminal 20 
(1364) . The synchronizing status of the cashier terminal 10 with 
the user terminal 20 is released (1366) . Then, information shown 
in Fig. 13(h) is displayed on the user terminal 20. 

Referring back to Fig. 5 again, the processing after the 
30 available amount checking 136 is completed will be described . The 
synchronizing server 3 0 transmits purchase amount information 
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including the purchase amount to the user terminal 2 0 (138) . The 
user terminal 20, receiving purchase amount information from the 
synchronizing server 30, performs the processing of the final 
purchase confirmation 140. 

5 Referring to Fig. 11, the processing of the final purchase 

confirmation 140 will be described as follows. The user terminal 
20 displays information shown in Fig. 13 (i) in order to display 
the purchase amount (14 02) . The user confirms if the purchase 
amount is correct (1404) . If correct, the user chooses "OK" on 

10 the display and fini-shes the processing of the final purchase 
confirmation 14 0. If the purchase amount is incorrect, the user 
chooses to "cancel". When the user chooses to "cancel", 
information which shows the settlement is canceled as shown in 
Fig. 13 ( j ) is displayed on the user terminal 20 (1406) , the user 

15 terminal 20 transmits a cancel signal to the synchronizing server 
30 (1408). The synchronizing server 30, receiving the cancel 
signal from the user terminal 20, transmits a cancel signal to 
the cashier terminal 10 (1410) . The cashier terminal 10 cancels 
the settlement, displays information shown in Fig. 12(g) which 

20 indicates that the settlement is canceled by the user, and finishes 
the processing (1412). The synchronizing server 30, after 
transmitting the cancel signal to the cashier terminal 10 , releases 
the synchronization of the communication to the cashier terminal 
10 with the communication to the user terminal 20 (1414) . 

25 Referring back to Fig. 5 again, the processing after the 

final purchase confirmation 140 is finished will be described. 
The user terminal 2 0 transmits a final purchase confirmation signal 
to the synchronizing server 30 (142) . The synchronizing server 
30, receiving the final purchase confirmation signal from the user 

30 terminal 20, accesses the user account database 70 and performs 
the settlement processing which records the purchase information 
(144) . When the settlement is completed, the synchronizing server 
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30 transmits a settlement completion notification to the cashier 
terminal 10 (146) , and transmits a receipt to the user terminal 
20 (150) . The cashier terminal 10 displays information shown in 
Fig. 12(h) of the completion of the settlement (148) . The user 
terminal 20 displays information shown in Fig. 13 (k) to show 
completion of the settlement (152) . 

In the above described settlement processing, when the 
synchronizing server 3 0 transmits the settlement completion 
notification 146 to the cashier terminal 10, the synchronizing 
server 3 0 may retrieve a part of the attribute information about 
the user of the user terminal 2 0 which performs the payment of 
the settlement from the user database 60, and may transmit the 
information to the cashier terminal 10 . The attribute information 
about the user transmitted to the cashier terminal 10 preferably 
may be information about sex or age of a user and so on. On the 
other hand, personal information such as a name, an address, and 
a credit card number is not suitable to be. included in the attribute 
information. The cashier terminal 10 obtains the attribute 
information so that the retailer may retrieve the information about 
the user who performed the payment of the settlement, may store 
the information about the item and the user data, and may form 
a purchase history database in the retailer's database. Thus, 
the retailer may detect buying behavior, such as an age group for 
users of a certain item from the purchase history stored in the 
database, so that the history may be used for marketing. 

When the synchronizing server 3 0 receives the purchase amount 
of items from the cashier terminal 10, the synchronizing server 
3 0 may also receive the name and/or price of purchased items and 
detailed information of purchased items. The synchronizing 
server 30 may store this information in the user database 60 as 
a user purchase history. The user terminal 2 0 may inquire about 
the user purchase history to the synchronizing server 30, and 
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receive the user purchase history from the synchronizing server 
30. 

The function and action of the settlement processing for 
the electronic settlement system applying the present embodiment 
5 is described above. In the interaction of the above described 
settlement, if there is any communication trouble such as an 
interruption of communication, all of the information and 
temporally data about the processing are initialized and the 
processing is finished. 

10 In the settlement processing described above, the clerk 

orally tells the transaction ID to the user or shows the user the 
transaction ID displayed on the user-side indicating unit 700 on 
the cashier terminal 10, But, the method to tell the transaction 
ID to the user or the user terminal 20 is not limited to these 

15 examples. The transaction ID received by the cashier terminal 
10 may be sent from the infrared communicating unit 708 of the 
cashier terminal 10 to the infrared communication unit 808 of the 
user terminal 20. Thus, the user does not need to input a 
transaction ID into the user terminal 20, therefore the miss-input 

20 of the transaction ID can be avoided. Furthermore, as a means 
to transmit the transaction ID from the cashier terminal 10 to 
the user terminal 20, a radio communication unit, the cashier 
terminal 10, and the user terminal 20 may have a wireless 
communication unit as an example of a short range communicating 

25 unit, and using wireless communication for a portable terminal 
such as Bluetooth, sends transaction ID each other. 

The cashier terminal information inquiry 104, the 
transaction ID inquiry 116, the user information inquiry 128, 
available limit inquiry 136, and the settlement processing 144, 
30 which are performed by the synchronizing server 30 in the above 
described settlement processing, is actually performed by the 
settlement processing unit 80 and data retrieving unit 86 of the 
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synchronizing server 30. 

The receiving of the access from the cashier terminal 10 
102, transaction ID transmission to the cashier terminal 10 106, 
sending the synchronizing signal to the cashier terminal 10 118, 
sending the user facial portrait image to the cashier terminal 
10 130, receiving the purchase amount information from the cashier 
terminal 10 134, and notification of the settlement completion 
146, as the data communication processing of the synchronizing 
server 30 with the cashier terminal 10, are performed by a first 
communication unit 82 of the synchronizing server 30. 

The receiving of the transaction ID from the user terminal 
20 114, sending to the user terminal 20 the cashier terminal 
information 122, receiving from the user terminal 20 the cashier 
terminal information confirmation signal 126, transmitting to the 
user terminal 2 0 purchase amount information 13 8, receiving from 
the user terminal 20 the final purchase confirming signal 142, 
and the notification of receipt to the user terminal 20 150, as 
the data communication processing of the synchronizing server 30 
with the user terminal 20, are performed by a second communication 
unit 84 of the synchronizing server 30. 

The "synchronizing multiple authentication" applied in the 
electronic settlement system of the present embodiment is 
complemented here. The present embodiment may multiple 
authenticate, that is combine a plurality of the authentication 
methods. Applying the synchronizing multiple authentication 
method, the user previously registers a plurality of passwords 
to the user database 60. A four-digit number is usually used for 
a personal identification number for a credit card or a bankcard. 
A user often chooses a simple combination of numbers, his or her 
birth date, telephone number, and so on, in order not to forget. 
Other people may easily guess the number so that the number suffers 
from a false use. Applying "the synchronizing multiple 
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authentication" method, the user previously registers a plurality 
of personal information not known by others such as his or her 
mother's maiden name, name of grandfather or grandmother, his or 
her domicile of origin, and so on. The synchronizing server 30 
5 chooses at least one of the pieces of registered information, and 
transmits to the user terminal 20 a question which is asked to 
the user about the chosen registered information. Only the 
original owner of the user terminal 20 can answer the randomly 
chosen question. Thus, when the authentication using a facial 

10 portrait is not enough, further inquiries about a password or 
personal information are used so that the accuracy of the 
authentication can be improved. For the user, without using a 
combinationof numbers difficult to remember, personal information 
inerrable, not known by others, and hard to forget may be used 

15 for his or her password. Because the synchronizing server 30 
intermediates the authentication between the user terminal 20 and 
the cashier terminal 10, no password information is sent from the 
user terminal 20 to the cashier terminal 10. Thus, the user's 
password is not known by the clerk, therefore the user can use 

20 the password without suffering from a false use. 

Applying the electronic settlement system of the present 
embodiment, the clerk of the retailer authenticates the user with 
facial portrait data . The clerk further requests the user to input 
a password and accuracy of authentication can be improved 
25 corresponding to the importance of a situation such as a doubtful 
case or for an expensive settlement. The user, using a portable 
apparatus having a wireless communication function such as a 
cellular phone or a portable terminal, can settle a transaction 
simply, conveniently, and safely. 

30 (Second embodiment) 

The electronic settlement system applying a second 
embodiment of the present invention will be described here. In 
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the first embodiment, the synchronizing server 30 retrieves the 
cashier terminal information stored in the cashier database 50, 
detects the authentication method appointed by the retailer or 
the cashier terminal 10, and authenticates the user based on the 
5 detected authentication method. In the second embodiment, the 
user or the user terminal 20 also may appoint the authentication 
method. The point that the method authenticating the user is 
decided, based on the authentication method the user appointed 
and the authentication method the cashier terminal appointed, is 
10 different from the first embodiment. The rest of the embodiment 
is almost the same as the first embodiment . Here , these components 
have the same action and construction as the first embodiment and 
will not be described. 

Fig. 14 shows an example of cashier terminal information 

15 6000 stored in a cashier database 50. The cashier terminal 
information 6000 stores a cashier registration number that 
identifies the cashier terminal 10, a retailer's name, the name 
of the store, the cashier terminal number, and the authentication 
method appointed by the retailer or the cashier terminal 10 . The 

20 authentication method is, for example, appointed to perform both 
the visual authentication and the password authentication. Fig. 
19 explanatorily shows an example of an authentication method 
stored in an authentication method field of cashier terminal 
information 6000. The authentication method appointed by the 

25 retailer or the cashier terminal 10 has the following variation: 
no authentication; cases where at least one of the visual 
authentication or the password authentication is appointed, such 
as the visual authentication only, the password authentication 
only, the visual authentication or the password authentication, 

30 the visual authentication and the password authentication, and 
so on; or cases that the authentication method is varied depend 
on the purchase amount such as if the purchase amount is, for example, 
ten thousands yen or more, both the visual authentication and the 
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password authentication are performed, otherwise, only the visual 
authentication is performed; and so on. 

Fig. 15 shows an example of user information 6010 stored 
in a user database 60. The user information 6010 stores a user 
5 terminal identifying number of the user terminal 2 0 such as a calling 
telephone number for example , user attribute information, history 
of the user about the electronic settlement , number of credit cards 
or bank cards, available amount, the authentication method 
appointed by the user or the user terminal 2 0 , and the authentication 
10 data registered by the user. The user attribute information is 
stored in the attribute information file 6020. History of the 
user about the electronic settlement is stored in a history file 
6030. The authentication data registered by the user is stored 
in the authentication data file 6040. 

15 Fig. 16 shows an example of an attribute information file 

6020, which stores the user ' s name , age, sex, address, occupation, 
and so on. Fig. 17 shows an example of the history file 6030. 
A purchase history includes the purchase date, purchase ID, 
purchase amount in the electronic settlement, and settlement date 

20 of the credit card or the bankcard. Fig. 18 shows an example of 
an authentication data file 6040. For authentication data, 
information only the user knows is registered in the authentication 
data file 6040 such as the name of his or her grandfather or 
grandmother, mother ' s maiden name , name of domicile town , favorite 

25 author, name of elementary school, and so on. The user may be 
authenticated by answering the question chosen at random from the 
registered authentication data, such as " what is your mother's 
ma i den name ? " 

Fig. 20 explanatorily shows an example of an authentication 
30 method stored in an authentication method field of user information 
6010. An example of the authentication method appointed by the 
user or the user terminal 20 is listed in the following. Type 
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Ul has no authentication; the authentication method appointed by 
the cashier terminal 10 is selected. Type U2 adds the password 
authentication; this is selected when the user always wants to 
authenticate with the password authentication. Type U3 refuses 
5 the visual authentication; this is selected when the user does 
not want to let the clerk authenticate with facial portrait data. 
Type U4 changes the type of the authentication depending on the 
purchase amount; for example, if the purchase amount is 5000 yen 
or more, password authentication is needed, or else the 
10 authentication is not performed. 

Fig. 21 explanatorily shows an authentication method agreed 
between the cashier terminal 10 and the user terminal 2 0 based 
on the authentication method appointed by the cashier terminal 
10 and the authentication method appointed by the user terminal 



authentication method is explained in the following. When the 
user does not appoint the authenticationmethod, the authentication 
method appointed by the cashier terminal 10 is performed. When 



Q 20 the user does not appoint the authentication method and the cashier 
terminal 10 appoints no authentication, no authentication is 
performed. This may be performed when a small purchase amount 
is settled so that no authentication is needed to perform the 
electronic settlement . When the user does not appoint the 

25 authentication method and the cashier terminal 10 appoints the 
visual authentication or the password authentication, at least 
one of the visual authentication or the password authentication 
is performed. In such a case, the clerk using the cashier terminal 
10 may choose either of the visual authentication or the password 

30 authentication; or only in such a case that the visual 

authentication is not suitable to authenticate the user, the 
password authentication may be selected. When the user does not 
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First, in the case that the user does not appoint the 
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appoint the authentication method and the cashier terminal 10 
appoints only the visual authentication, only the visual 
authentication is performed. If the user is not able to be 
authenticated using the visual authentication, no more 
5 authentications is performed, so that the password authentication 
is not performed . When the user appoints no authentication method, 
the cashier terminal 10 appoints only the password authentication; 
only the password authentication is performed, so that the visual 
authentication is not performed. When the user appoints no 

10 authentication method, the cashier terminal 10 appoints the visual 
authentication and the password authentication, both of the visual 
authentication and the password authentication is performed. If 
the user is authenticated using the visual authentication, for 
improvement of authentication accuracy, the password 

15 authentication is also performed. 

Next , the case that the user adds the password authentication 
is explained in the following. Appointing adding of the password 
authentication can protect the user . In a case that the user loses , 
leaves, or has stolen the user terminal 20, such as a cellular 

20 phone or a portable terminal, the user terminal 20 suffers from 
a false use such as an incorrect access to the electronic settlement . 
When the user appoints adding of the password authentication and 
the cashier terminal 10 appoints the visual authentication or the 
password authentication, both of the visual authentication and 

25 the password authentication are performed. In this case, only 
the visual authentication does not match the authentication 
accuracy the user appointed, even when the user is authenticated 
by the visual authentication, for improving the authentication 
accuracy, the password authentication is also performed. 

30 In a case where the user appoints adding of the password 

authentication and the cashier terminal 10 appoints only the visual 
authentication, both of the visual authentication and the password 
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authentication are performed. The cashier terminal 10 appoints 
only the visual authentication; the user requires not only the 
visual authentication, but also adding the password authentication 
so that the higher accuracy authentication is performed. 
Therefore , the password authentication is performed combined with 
the visual authentication. Thus, when the user requires higher 
authentication accuracy than the cashier terminal 10 requires, 
the authentication method with higher authentication accuracy is 
performed . 

When the user appoints adding of the password authentication 
and the cashier terminal 10 appoints only the password 
authentication, the authentication accuracy required by both of 
the cashier terminal 10 and the user matches, so that only the 
password authentication is performed and the visual authentication 
is not performed. 

When the user appoints adding of the password authentication, 
the cashier terminal 10 appoints the visual authentication and 
the password authenticat ion, the authentication accuracy required 
by both of the cashier terminal 10 and the user matches, so that 
both of the visual authentication and the password authentication 
are performed. 

Next, the case that the user appoints refusing the visual 
authentication is explained here. The user, appointing refusal 
of the visual authentication, may reject authentication by facial 
portrait data displayed on the cashier terminal 10. 

When the user appoints the refusal of the visual 
authentication and the cashier terminal 10 appoints the visual 
authentication or the password authentication, because the user 
does not accept the visual authentication, only the password 
authentication is performed. 
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When the user appoints the refusal of the visual 
authentication and the cashier terminal 10 appoints only the visual 
authentication, because the authentication method does not match 
between the cashier terminal 10 and the user, the authentication 
is refused so that the user is not authenticated. Thus, the 
electronic settlement is not performed. 

When the user appoints the refusal of the visual 
authentication and the cashier terminal 10 appoints only the 
password authentication, the password authentication is performed, 
but the visual authentication is not performed. 

When the user appoints the refusal of the visual 
authentication and the cashier terminal 10 appoints both of the 
visual authentication and the password authentication, because 
the visual authentication required by the cashier terminal 10 is 
refused by the user, an agreement on the authentication method 
between the cashier terminal 10 and the user is not able to be 
made. Thus, the authentication is refused, so that the user is 
not authenticated and the electronic settlement is not performed. 

Fig. 22 is a flow chart showing an electronic settlement 
system of a second embodiment of the present invention. Figs. 23 
to 27 are flow charts showing processing of details in Fig. 22. 

Referring to Fig . 22, the settlement processing is described 
in the following. A user purchases an item from a retailer, and 
pays the value of the merchandise at a cashier over the counter. 
First, the user chooses an electronic settlement. The clerk, at 
the user ' s request of electronic settlement , chooses the electronic 
settlement menu on the cashier terminal 10, and the electronic 
settlement starts (100) . The cashier terminal 10 accesses the 
synchronizing server 30 (102) . The cashier terminal 10 transmits 
a cashier registration number which is unique to each cashier 
terminal when the cashier terminal 10 accesses the synchronizing 
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server 30. 

The synchronizing server 30, corresponding to the access 
from the cashier terminal 10 , starts to connect the cashier terminal 
10, and inquires the cashier terminal information based on the 
5 cashier registration number transmitted from the cashier terminal 
10 (104) . 

Referring to Fig. 23, the cashier terminal information 
inquiry 104 processing will be described. The synchronizing 
server 30 accesses the cashier database 50 (1042) , and retrieves 

10 the cashier terminal information of a cashier terminal matching 
to the cashier registration number (1044) . A name of a retailer, 
a name of a shop, the cashier terminal number in that store, 
authentication method, and so on are registered in the cashier 
terminal information corresponding to the cashier registration 

15 number. The synchronizing server 30 decides the authentication 
method registered in the cashier terminal information (1046) . The 
authentication method appointed in the cashier terminal 
information, as shown in Fig. 19 for example, may be a combination 
of a plurality of authentication methods such as the visual 

20 authentication or the password authentication, or the method that 
the authentication method selected dependent on the purchase amount 
Furthermore, the synchronizing server 3 0 allocates a transaction 
ID to the cashier terminal 10 (1048) . The transaction ID is a 
number for identifying the settlement that is processed by the 

25 cashier terminal 10. 

Referring back to Fig. 22, the following steps are the same 
as the corresponding numbered processing in the first embodiment 
shown in Fig. 5, so they are not described here. The steps are 
after the cashier terminal information inquiry 104 processing, 
30 from the processing that the synchronizing server 3 0 delivers the 
transaction ID to the cashier terminal 10 (106) , the processing 
that the cashier terminal 10 displays the transaction ID (108) , 
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the processing that the clerk notifies the transaction ID to the 
user (110) , the processing that the user inputs the notified 
transaction ID (112) , the processing that the user terminal 20 
transmits the transaction ID to the synchronizing seirver 30 (114) , 
5 the processing that the synchronizing server 3 0 receives the 
transaction ID and makes an inquiry to the transaction ID (116) , 
the processing that the synchronizing server 30 transmits the 
synchronizing signal to the cashier terminal 10 (118) , the 
processing that the cashier terminal 10 receives the synchronizing 

10 signal, and lights a synchronization indicator 706 in the cashier 
terminal 10 (120) , the processing that the synchronizing server 
30, after the synchronization is established, sends to the user 
terminal 20 the cashier terminal information (122), the processing 
that the user confirms the synchronized cashier terminal (124) , 

15 to the processing that the user terminal transmits the cashier 
terminal information confirmation signal to the synchronizing 
server 30 (126) . 

The synchronizing server 30, receiving the cashier terminal 
information confirmation signal from the user terminal 20 , performs 

20 the user information inquiry 128 processing. Referring to Fig. 
24, the user information inquiry 128 processing will be described 
here . The synchronizing server 3 0 retrieves a user terminal number 
from the user terminal 20 (1280) . When the user terminal 20 is 
a cellular phone , the user terminal number is the calling telephone 

25 number. The synchronizing server 30 accesses the user database 
60, and detects the user information corresponding to the user 
terminal number (1282) , It is checked that the user information 
corresponded to the user terminal number exists in the user database 
60. Then if the user terminal 20 is registered based on the user 

30 terminal number it is confirmed (1284) . When the user terminal 
is not registered, the synchronizing server 30 transmits to the 
user terminal 20 a message "you are not registered. " (1286) . 
Information, notifying that the user does not have user 
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registration is displayed on the user terminal 20. The 
synchronizing server 30 releases the synchronizationof the cashier 
terminal 10 with the user terminal 20 (1290) , and finishes the 
processing . 

5 When the user registration is verified, user information 

6010 is retrieved from the user database 60 (1292) . As shown in 
Fig. 15, the user information 6010 stores user attribute 
information, history of the user about the electronic settlement, 
number of credit cards or bank cards, available amount, and the 

10 authentication method appointed by the user or the user terminal 
20. The synchronizing server 30 retrieves the authentication 
method appointed by the user or the user terminal 20 (1293) . The 
authentication method appointed by the user or the user terminal 
20, as shown in Fig. 2 0 for an example, may be a requirement of 

15 higher authentication accuracy such as adding of the password 
authentication, the refusal of a predetermined authentication 
method such as refusal of the visual authentication, selection 
of the authentication method dependent on the purchase amount, 
and so on. 

20 Next , if the user has a problem with his or her payment history 

on his or her credit card or his or her bankcard and so on, the 
history of the user is checked using the electronic settlement 
stored in the history file 6030 (1294) . When any problem is found 
with his or her payment history, a message "we cannot accept your 

25 access." is transmitted to the user terminal 20 (1296). 

Information notifying that settlement is rejected is displayed 
on the user terminal 20. The synchronizing server 30 releases 
the synchronization of the cashier terminal 10 with the user 
terminal 20 (1298), and finishes the processing. 

30 When the user has no problem with his or her credit history, 

the synchronizing server 3 0 advances to the next processing. 
Referring back to Fig, 22, the synchronizing seirver 30, receives 
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from the cashier terminal 10 the purchase amount information 
including the purchase amount (134) . The synchronizing server 
30 performs a user authenticationusing the " synchronizing multiple 
authentication" based on the authentication method appointed by 
the cashier terminal 10 in the cashier terminal information inquiry 
104 and the authentication method appointed by the user terminal 
20 in the user information inquiry 128 (135) . " The synchronizing 
multiple authentication" is almost the same as described in the 
first embodiment, as here in the present embodiment, however the 
following points are different. Both of the cashier terminal 10 
and the user terminal 20 may appoint each authentication method, 
the authentication method appointed by the cashier terminal 10 
and the authentication method appointed by the user terminal 2 0 
are matched, and the agreeable authentication method is selected, 
then the user authentication is performed. 

Referring to Fig . 25, the user authentication 13 5 processing 
will be described in the following. The synchronizing server 3 0 
selects the authentication method to be performed based on the 
authentication method appointed by the cashier terminal 10 and 
the authentication method appointed by the user terminal 2 0 (7000) . 
As an example shown in Fig. 21, the authentication method to be 
performed based on the authentication method appointed by the 
cashier terminal 10 and the authentication method appointed by 
the user terminal 20 are matched so that the authentication method 
to be performed is selected. If the authentication method which 
may fill both the appointment of the cashier terminal 10 and the 
appointment of the user terminal 20 does not exist, (7002) , the 
synchronizing server 30 transmits to the user terminal 20 a message 
of authentication disagreement. The user terminal 20 displays 
information indicating that because of the disagreement of the 
authentication method, the authentication is refused (7004) , and 
finishes the processing. If an agreeable authentication method 
exists, exceeding to the processing 7006, so that the user 
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authentication is performed based on the selected authentication 
method (7006) . 

Here, as an example, a case that the visual authentication 
or the password authentication is appointed by the cashier terminal 
5 10 in the cashier terminal information inquiry 104, and adding 
the password authentication is appointed by the user terminal 20 
in the user information inquiry 128 is described. In this case, 
because the user requires improving the authentication accuracy 
by adding the password authentication, the authentication method 

10 agreeable to both the clerk and the user is the visual authentication 
and the password authentication. That is, the visual 
authentication is performed and the password authentication is 
also performed, so that the authentication accuracy is ensured. 
Fig . 2 6 is a flow chart showing a user authentication 700 6 processing 

15 which additionally performs a password authentication after a 
visual authentication. The synchronizing server 3 0 retrieves a 
user facial portrait image from the user database 60 (7007) . The 
synchronizing server 30 transmits the facial portrait image data 
to the cashier terminal 10 (7008) . The cashier terminal receives 

20 and displays the user facial portrait image data from the 

synchronizing server 30 (7010) . The clerk verifies the user and 
the displayed facial portrait, and authenticates the user (7012) . 
If the clerk is not able to ensure the user authentication, the 
cashier terminal 10, by the direction of the clerk, transmits an 

25 invalidmessage to the synchronizing server 30 (7018) , and displays 
the information indicating the authentication is invalid (7016) . 
If the user is authenticated with the facial portrait, the cashier 
terminal 10 transmits to the synchronizing server 30 a signal that 
the visual authentication is complete, by the direction of the 

30 clerk (7013) . On the other hand, the cashier terminal 10 displays 
the information indicating the password authentication is being 
undertaken. The synchronizing server 30, receiving the signal 
that the visual authentication is completed from the cashier 
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terminal 10, performs the password authentication (7014). 

Fig. 27 is a flow chart showing a password authentication 
7014 processing. The synchronizing server 3 0 retrieves data 
necessary for authentication from the user database 60 and 
5 generates authentication data (1326) . The authentication data, 
for example, shown in Fig. 18, is formed in a quest ion which inquires 
the registered authentication information based on the 
authentication information registered by the user. The 
registered authentication information is personal information not 

10 known by others. The question is chosen at random from the 

authentication information registered by the user, so that the 
probability that the authentication information is stolen and 
suffers from the false use is reduced. The password authentication 
processing after the processing 1328 is the same processing as 

15 the first embodiment shown in Fig. 9, therefore it will not be 
described here . 

Referring back to Fig. 22 again, the synchronizing server 
30 performs available amount check processing 136 based on the 
purchase amount information received from the cashier terminal 

20 10. The available limit inquiry processing 136 may be performed 
before the user authentication 135 processing . The following steps 
are the same as the corresponding numbered processing in the first 
embodiment, so that it is not described here. The steps are 
available limit inquiry processing (136) , the processing that the 

25 synchronizing server 3 0 transmits purchase amount information 
including the purchase amount to the user terminal 20 (138) , the 
processing that the user terminal 20, receiving purchase amount 
information from the synchronizing server 30, performing the 
processing of the final purchase confirmation (140) , the processing 

30 that the user terminal 2 0 transmits a final purchase confirmation 
signal to the synchronizing server 30 (142) , the processing that 
the synchronizing server 30, receiving the final purchase 
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confirmation signal from the user terminal 20, accesses the user 
account database 70 and performs the settlement processing which 
records the purchase information (144), the processing that 
synchronizing server 30 transmits a settlement completion 
5 notification to the cashier terminal 10 (146) , the processing 
that the synchronizing server 30 transmits a receipt to the user 
terminal 20 (150) , the processing that the cashier terminal 10 
displays information indicating the completion of the settlement 
(148), and the processing that the user terminal 20 displays 
10 information indicating the completion of the settlement (152). 

Another case of the user authentication 135 based on the 
synchronizing multiple authentication is described in the 
following. When the cashier terminal 10 appoints the visual 
authentication or the password authentication and the user terminal 
20 appoints refusal of the visual authentication, the performed 
authentication method is only the password authentication. In 
this case, the synchronizing server 30 notifies to the cashier 
terminal 10 that the user refuses the visual authentication so 
that the password authentication is performed. The cashier 
terminal 10 displays information that the user refuses the visual 
authentication so that the password authentication is performed. 
After the processing, the password authentication 7014 processing 
the same as in Fig. 2 7 is performed. 

Another case of the user authentication 135 based on the 
25 synchronizing multiple authentication is described here. The 
following is a case where the cashier terminal 10 or the user terminal 
20 appoints the authentication method which changes the type of 
the authentication depending on the purchase amount . For example , 
an authentication method is appointed as following : if the purchase 
30 amount is a predetermined allowable value or more, both of the 
visual authentication and the password authentication, if the 
purchase amount is less than the predetermined allowable value, 

NI-0005 




only the visual authentication is performed . If bothof the cashier 
terminal 10 and the user terminal 20 appoints the authentication 
method which changes the type of the authentication depending on 
the purchase amount, the smaller allowable value appointed by 
either of the cashier terminal 10 or the user terminal 20 is chosen 
to change the authentication method. The synchronizing server 
30 judges if the purchase amount of the user exceeds the allowable 
value, and if it exceeds the allowable value, performs the user 
authentication processing 7006 the same as in Fig. 26. If the 
purchase amount of the user does not exceed the allowable value, 
only the visual authentication is performed; or as the visual 
authentication 132 processing of the first embodiment shown in 
Fig. 9, if the visual authentication is approved, the settlement 
is performed without the password authentication, only when the 
visual authentication is not able to approve the user, the password 
authentication is performed. 

Here, as an example of the "multiple authentication", the 
combination of the visual authentication and the password 
authentication, the voice authentication may be added to the 
combination as an authentication method. The password 
authentication requires the user to input the password using the 
user terminal 20, the voice authentication only requires the user 
to speak to the cellular phone as an example of the user terminal 
20 and the inquiry to the previously registered voice data may 
be obtained, so that the user does not need to input. Thus, the 
authentication is simpler and more convenient. 

Applying the electronic settlement system of the present 
embodiment, both of the cashier terminal 10 and the user terminal 
20 may appoint the authentication method, and the agreeable 
authentication method is selected between the user and the retailer 
or the clerk, then the user may be authenticated. Therefore, the 
authentication method and the authentication accuracy demanded 
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by the user and the authentication method and the authentication 
accuracy demanded by the clerk or the retailer may be matched. 
Furthermore, the authentication method may be varied dependent 
on the purchase amount . 

5 (Third Embodiment) 



embodiment of the present invention will be described in the 
following. In the first embodiment and the second embodiment, 
the synchronizing server 30 transmits to the cashier terminal 10 
10 the transaction ID as an example of the transaction identifying 
_ number, the cashier terminal 10, by displaying the transaction 

ID and so on, notifies it to the user, and the user inputs the 
T-i transaction ID to the user terminal 20, and the user terminal 2 0 

y transmits the transaction ID to the synchronizing server 30 , Thus , 

Ln 15 the cashier terminal 10 and the user terminal 20 are respectively 
identi f ied , the communication to the cashier terminal 10 performing 
O the settlement is synchronized with the communication to the user 

Q terminal 20 performing the settlement by the transaction ID, and 

1^ the settlement of the transaction is performed between the cashier 

O 20 terminal 10 and the user terminal 20. In the third embodiment, 
the synchronizing server 3 0 transmits the transaction ID number 
to the user terminal 20, the user terminal 20 sends the transaction 
ID number to the cashier terminal 10, and the cashier terminal 
10 transmits the transaction ID number to the synchronizing server 
25 30. Thus, using the transaction ID number, communication to the 
cashier terminal 10 performing the settlement is synchronized with 
communication to the user terminal 2 0 performing the settlement 
by the transaction ID, and the settlement of the transaction is 
performed between the cashier terminal 10 and the user terminal 
30 20 . This is the difference from the first and the second embodiment . 
Only the difference from the first and the second enibodiment is 
described here . 



The electronic settlement system applying the third 
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Fig. 28 shows a configuration of a cashier terminal 10 
applying a third embodiment. Different from the first and the 
second embodiment, the cashier terminal 10 of the present 
embodiment further has a pattern code reader unit 710 which reads 
5 in a pattern code such as a bar code or a cyber code which is a 
two dimension bar code. The pattern code reader unit 710 reads 
in the pattern code the user terminal 20 displaying on the display 
unit 802. 

Fig. 29 shows an example of a code indication on a display 
10 unit 802 of a user terminal 20. The user terminal 20 converts 
the transaction ID number received from the synchronizing server 
3 0 to a bar code and displays the bar code on the display unit 
802 . A message such as "scan this barcode by the checker" is also 
displayed on the display unit 802, the user of the user terminal 
15 20 presents the displayed bar code to the clerk of the cashier 
terminal 10, the clerk of the cashier terminal 1 0 , using the pattern 
code reader unit 710, lets the cashier terminal 10 read in the 
bar code displayed on the display unit 802 of the user terminal 
2 0 , and lets the cashier terminal 10 input the transaction IDnumber . 
20 In another case, the user operates and reads in the pattern code 
reader unit 710 of the cashier terminal 10 the bar code displayed 
on the display unit 802 of the user terminal 20. 

Fig. 30 shows an example of a cyber code indication on a 
display unit 802 of a user terminal 20. The user terminal 20 

25 converts the transaction ID number received from the synchronizing 
server 30 to a cyber code which is the two dimension pattern code, 
and displays the cyber code on the display unit 802 . The pattern 
code reader unit 710 of the cashier terminal 10 reads in the cyber 
code displayed on the display unit 802, retrieves the transaction 

30 ID number, and inputs to the cashier terminal 10. 

Fig. 31 is a flow chart showing an electronic settlement 
system applying the third embodiment of the present invention. 
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A user purchases an item from a retailer, and pays the value of 
the merchandise at a cashier over the counter. First, the user 
chooses an electronic settlement . The clerk, at the user ' s request 
of electronic settlement, chooses the electronic settlement menu 
on the cashier terminal 10, and the electronic settlement starts 
(100) . The user chooses the electronic settlement menu from the 
user terminal 20, and starts the synchronizing settlement (101) . 
The user terminal 20 accesses the synchronizing server 30 (202) . 
The synchronizing server 30 inquires the user information based 
on the calling telephone number, as an example of the user terminal 
identifying number for the user terminal 20 (128) . The user 
information inquiry 128 processing is not described here because 
the processing is the same as the first and second embodiments. 
The synchronizing server 30 defines a unique transaction ID number 
for each transaction performed by the user terminal 20, and 
transmits the transaction ID number to the user terminal 20 (206) . 
The user terminal 2 0 converts the transaction ID number received 
from the synchronizing server 30 to the bar code which is an example 
of the pattern code, and displays the bar code on the display unit 
802 (208) . The user presents the bar code displayed on the display 
unit 802 of the user terminal 20 to the clerk at the cashier terminal 
10 (210) . The clerk at the cashier terminal 10, using the pattern 
code reader unit 710 , reads in the bar code displayed on the display 
unit 802 of the user terminal 20 (212) . The bar code read in is 
converted to the transaction ID number, and inputted to the cashier 
terminal 10. The cashier terminal 10 accesses the synchronizing 
server 30, transmits the cashier registration number unique to 
each cashier terminal 10, and transmits the transaction ID number 
acquired from the user terminal 20 to the synchronizing server 
30 (214) . The synchronizing server 30 , corresponding to the access 
from the cashier terminal 10, starts to connect to the cashier 
terminal 10, and inquires the cashier terminal information based 
on the cashier registration number transmitted from the cashier 
terminal 10 (104) . The cashier terminal information inquiry 104 
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processing is the same as the first and second embodiments; 
therefore they will not be described here. 

After the cashier terminal information inquiry 104 
processing, the synchronizing server 30 inquires the transaction 
5 ID number received from the cashier terminal 10 (116) . 

The synchronizing server 30 is on an "access wait" status, 
that is waiting to be accessed by the cashier terminal 10 and for 
the transaction ID to be sent. On the "access wait" status, if 
a cashier terminal 10 using the same transaction ID to be allocated 
10 to the user terminal. 20 accesses, the synchronizing server 30 
establishes one to one "synchronization" status for that cashier 
terminal 10 with the user terminal 20, and realizes a 
synchronization of the communication to the cashier terminal 10 
with the communication to the user terminal 20. 

15 The transaction ID number is used corresponding the 

transaction of the cashier terminal 10 and the user terminal 20, 
which performs the transaction identified by the transaction ID 
number, witheachother , and synchronizes the communication between 
them. Therefore, when the "synchronization" is established for 

20 the transaction ID number issued by the synchronizing server 3 0 
and the "access wait" is released, the same transaction ID number 
may be used for another transaction. Thus, the transaction ID 
number, even though it is a number for identifying transactions, 
does not need to be a large digit number such as a transaction 

25 ID, which is a number unique to every transaction; but needs to 
be large enough to keep the uniqueness for a certain period for 
establishing the "synchronization" . 

A time out limit is set up for the "access wait" status of 
the synchronizing server 30, and limits the access wait period 
30 with the cashier terminal 10 to a predetermined length, for example, 
3 minutes . When no answer is obtained for the transaction ID issued 
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from the cashier terminal 10 for a predetermined period, the 
synchronizing server 3 0 shuts down the connection to the cashier 
terminal 10, and initializes it. This time out function is set 
up in order to avoid trouble for cases such as where the pattern 
5 code reader unit 710 of the cashier terminal 10 is not able to 
read in the pattern code or that a communicating condition of the 
cashier terminal 10 with the synchronizing server 3 0 is poor so 
that data communication is not able to be performed normally, and 
so on. 

10 Fig. 32 is a flow chart showing a transaction ID inquiry 

116 processing. In Fig. 32, the synchronizing server 30 is on 
the "access wait " status, the access from the user terminal exists, 
and checks if the transaction ID number is transmitted from the 
cashier terminal 10 (2162) ; if the access does not exist, it checks 

15 if it exceeds the time out limit (2164) . If it exceeds the time 
out limit, the synchronizing server 30 shuts the connection to 
the user terminal 20 down (2166), and finishes the processing. 

When the cashier terminal 10 transmits the transaction ID, 
it is checked whether it is on the "synchronizing wait" status 

20 corresponding to the user terminal 20 that the transaction ID is 
found (1168), if not, the transaction ID number inquiry error 
message is transmitted to the cashier terminal 10 (2170) . The 
cashier terminal 10 displays the transaction ID number error 
message on the display (2172) . The clerk of the cashier terminal 

25 10 reads in the bar code again (212) . 

When a user terminal 20 in the synchronizing wait which 
corresponds to the transaction ID number is the same as the 
transaction ID number transmitted from the cashier terminal 10, 
transaction ID number, the synchronizing server 30 establishes 
30 the "synchronizing status" of the cashier terminal 10 with the 
user terminal 20, which are corresponded to each other by the 
transaction ID number, and synchronizes the communication to the 
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cashier terminal 10 with the communication to the user terminal 
20 with each other (2174) . 

Referring back to Fig. 31, the following steps are the same 
as the corresponding numbered processing in the second embodiment 
5 shown in Fig. 22, so they are not described here. The steps are 
the processing that the synchronizing server 3 0 transmits the 
synchronizing signal to the cashier terminal 10 (118), the 
processing that the cashier terminal 10 receives the synchronizing 
signal, and lights a synchronization indicator 706 in the cashier 

10 terminal 10 (120) , the processing that the synchronizing server 
30, after the synchronization is established, sends to the user 
terminal 2 0 the cashier terminal information (122) , the processing 
that the user confirms the synchronized cashier terminal (124) , 
the processing that the user terminal 2 0 transmits the cashier 

15 terminal information confirmation signal to the synchronizing 
server 3 0 (126) , the processing that the synchronizing server 3 0 
receives from the cashier terminal 10 the purchase amount 
information including the purchase amount (134), the user 
authentication processing by the synchronizing server 30 (135) , 

20 the available limit inquiry processing by the synchronizing server 
30 (136) , the processing that the synchronizing server 30 
transmits purchase amount information including the purchase 
amount to the user terminal 20 (138) , the processing that the user 
terminal 20 performs the processing of the final purchase 

25 confirmation (140), the processing that the user terminal 20 
transmits a final purchase confirmation signal to the synchronizing 
server 3 0 (142) , the settlement processing by the synchronizing 
server 30 (144), the processing that synchronizing server 30 
transmits a settlement completion notification to the cashier 

30 terminal 10 (146) , the processing that the synchronizing server 
30 transmits a receipt to the user terminal 20 (150), the processing 
that the cashier terminal 10 displays information indicating the 
completion of the settlement (148) , and the processing that the 
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user terminal 20 displays information indicating the completion 
of the settlement (152). 

In the above description, the user terminal 20 displays the 
transaction ID number received from the synchronizing server 3 0 
in the form of the pattern code such as a bar code, a cyber code, 
and so on. In other cases, the user terminal 20, using a light 
communication means such as an infrared communication or a short 
distance wireless communication means such as a Bluetooth, 
communicates with the cashier terminal 10 and transmits the 
transaction ID number to the cashier terminal 10. 

Applying the electronic settlement system of the present 
embodiment , the user terminal 2 0 receives the transaction ID number 
allocated by the synchronizing server 30, displays in the form 
of the pattern code such as the bar code, the cyber code, and so 
on, and lets the cashier terminal 10 read in. The cashier terminal 
10 retrieves the transaction ID number from the pattern code and 
transmits the transaction ID number to the synchronizing server 
30. Thus, the user terminal 20 and the cashier terminal 10 are 
corresponded to each other using the transaction ID number, and 
the settlement is performed between the user terminal 2 0 and the 
cashier terminal 10 corresponded to each other. Therefore, the 
user inputs no transaction ID number, so that the electronic 
settlement can be performed simply and conveniently. 

( Fourth Embodiment ) 

The electronic settlement system applying the fourth 
embodiment of the present invention will be described in the 
following. Applying the electronic settlement system of the 
present embodiment , when the user purchases an item using a vending 
machine, the user may execute a settlement electronically via a 
network . 
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Fig. 33 is a block diagram showing a configuration of an 
electronic settlement system applying the fourth enr±)odiment of 
the present invention. The electronic settlement system of the 
present embodiment has a vending machine 16 as an example of a 
billing terminal, a user terminal 2 0 as an example of a paying 
terminal, a synchronizing server 30 as an example of a settlement 
device, a carrier server 40, a cashier database 50 as an example 
of a billing terminal database, a user database 60 as an example 
of a paying terminal database, and a user account database 70. 

The vending machine 16 may connect to the synchronizing 
server 3 0 via a communication path. A communication means from 
the vending machine 16 to the synchronizing server 30 may be any 
of the followings; a communication using a commercial telephone 
line, a communication using a private line, or a communication 
using radiotelephone communication . 

The rest of the components have the same numbers as Fig. 
1 and are the same as the first embodiment . Here, these components 
have the same action and construction as the first embodiment and 
will not be described. 

Fig. 34 shows a configuration figure of a vending machine 
16. The vending machine 16 has a plurality of keys 900 to choose 
an item, an operating unit 902 operating electronic settlement, 
a coin- insert ing unit 904 to insert coins, and an item collection 
unit 906. The electronic settlement operating unit 902 has a 
display unit 908 displaying processing of the electronic settlement , 
a start key 910 directing the start of the electronic settlement, 
and a cancel key 912 directing the cancellation of the electronic 
settlement . 

Referring to Fig. 35 and Fig. 36, settlement processing in 
the electronic settlement system applying the present embodiment 
will be described in the following . Fig . 35 is a flow chart showing 



NI-0005 




a settlement processing inanelectronic settlement systemapplying 
the fourth embodiment of the present invention. Fig. 3 6 shows 
examples of information indicated on a display unit 802 of a user 
terminal 20 . 

5 Referring to Fig. 35, the settlement processing will be 

described in the following. The user chooses the electronic 
settlement menu of the user terminal 20 (401) , selects the start 
key 910 of the vending machine 16 , so that the electronic settlement 
(400) starts. The vending machine 16 accesses the synchronizing 
10 server 30 (402) . The vending machine 16 transmits to the 

synchronizing server 3 0 a cashier registration number which is 
unique to the vending machine 16. 

The synchronizing server 30, corresponding to the access 
from the vending machine 16 , starts to communicate with the vending 

15 machine 16. The synchronizing server 30 inquires the cashier 
terminal information based on the cashier registration number 
transmitted from the vending machine 16 (404) . The processing 
from the cashier terminal information inquiry 404 to the user 
information inquiry 428 is the same as the processing from the 

20 cashier terminal information inquiry 104 to the user information 
inquiry 12 8 of the first embodiment shown in Fig. 5; therefore 
it will not be described here. In the synchronization indicating 
420 processing, the vending machine 16 may have a synchronization 
indicator to light the synchronization indicator, or may indicate 

25 the synchronization status by displaying characters on the display 
unit 908. 

The synchronizing server 30 transmits a selling order to 
the vending machine 16 after the user information inquiry 428 (430) . 
The vending machine 16, receiving the selling order from the 
30 synchronizing server 30, prompts the user to choose an item sold 
by the vending machine (432) . When the user chooses an item, the 
vending machine 16 transmits to the synchronizing server 3 0 the 
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purchase amount information (434). 

The processing from the available limit inquiry 436 
processing to the settlement processing 444 are the same as the 
processing from the available limit inquiry 136 processing to the 
5 settlement processing 144 of the first embodiment shown in Fig. 
5; therefore it will not be described here. 

When the settlement processing 444 is finished, the 
synchronizing server 30 notifies a settlement completion 
notification to the vending machine 16 (446) . The vending machine 
10 16 sends out the item the user has chosen (448) . The synchronizing 
server 30 transmits a receipt indicating the reception of the 
expense to the user terminal 2 0 (452) . The user terminal 20 
indicates the receipt (454) . 

The data communication of the vending machine 16 with the 
15 synchronizing server 30 as described above is all performed via 
the communication line 18. The data communication of the user 
terminal 2 0 with the synchronizing server 3 0 is performed via the 
radio communication channel 28 or the communication line 38 . The 
data communication of the vending machine 16 with the user terminal 
20 20 does not exist. 

The vending machine 16 notifies the transaction ID from the 
vending machine 16 to the user terminal 20 (410) by displaying 
the transaction ID on the display unit. As another case of the 
embodiment, the vending machine 16 has an infrared communication 

25 unit as an example of a short distance wireless communication unit , 
in the notification of the transaction ID from the vending machine 
16 to the user terminal 20 (410) processing, through the infrared 
communication, the transaction ID is transmitted from the infrared 
communication unit of the vending machine 16 to the infrared 

30 communication unit 808 of the user terminal 20. Thus, the user 
does not need to input the transaction ID to the user terminal 
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20 and an input mistake of the transaction ID may be avoided. 
Furthermore, for a means to transmit the transaction ID from the 
vending machine 16 to the user terminal 20, each of the vending 
machines 16 and the user terminals 20 has a wireless communication 
5 unit as an example of a short distance communication unit, using 
a wireless communication for portable apparatuses such as Blue 
tooth, and transits and receives the transaction ID. 

The electronic settlement system of the present embodiment, 
differs from the first, second, third, and fourth embodiments, 

10 because it does not perform the authentication of the user such 
as the visual authentication, the password authentication, the 
voice authentication, the iris or retina image authentication, 
fingerprint authentication, and so on. A settlement using the 
vending machine 16 settles only smaller amounts, and the need for 

15 user authentication is less important. When a cellular phone is 
used for the user terminal 20, the uniqueness of the calling number 
of a cellular phone authenticates the user, as long as the owner 
of the cellular phone oneself uses the cellular phone. In the 
case of settlement for the smaller amount, the user authentication 

20 processing may be omitted without significant problems. 

Therefore, the electronic settlement system applying the present 
invention may select the authentication method depending on the 
purchase amount, selling style, and so on. 

(Fifth Embodiment) 

25 The electronic settlement system applying the fifth 

embodiment of the present invention will be described in the 
following. Applying the electronic settlement system of the 
present embodiment , a user may access the Internet using a computer , 
access an on-line shopping server on the Internet, purchase an 

30 item, and settle the value of the merchandise. 

Fig. 37 is a block diagram showing a configuration of an 
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electronic settlement system applying the fifth embodiment of the 
present invention. The electronic settlement system of the 
present embodiment has a cashier terminal 14 , a plurality of virtual 
cashier terminals 12 as examples of billing terminals, a user 
terminal 20 as an example of a paying terminal, a synchronizing 
server 30 as an example of a settlement device, a carrier server 
40 , a cashier database 50 as an example of a billing terminal database , 
a user database 60 as an example of a paying terminal database, 
a user account database 70 , a shopping server 24 , and a user computer 
22 . 

The shopping server 24 is an on-line shopping server on the 
Internet 26 . The user computer 22 is a user computer that connects 
to the Internet 2 6 , and may access the shopping server 2 4 and perform 
the on-line shopping . 

The cashier server 14 is a server system representing the 
retailing of the on-line shopping, which constructs a plurality 
of virtual cashier terminals 12, and performs billing of the 
settlement processing with the user. 

The synchronizing server 30 performs the settlement 
processing of merchandise between the user and the mail order 
retailer. The synchronizing server 3 0 connects to the virtual 
cashier terminals 12 and to the user terminal 20 via the 
communication network, and performs data communication. 

The virtual cashier terminals 12 in the cashier terminal 
14 connects to the synchronizing server 30 via a communication 
line 18, and performs data communication. The communication line 
18 may be either of a commercial telephone line or a private line. 

The user terminal 20 connects to the carrier server 40 via 
a radio communication channel 28. The carrier server 40 connects 
to the synchronizing server 30 via communication line 38. The 
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virtual cashier terminal 12 does not directly communicate with 
the user terminal 20. 

The synchronizing server 3 0 retrieves information about the 
billing of the transaction from communication with the virtual 
5 cashier terminal 12. The synchronizing server 30 retrieves 

information about the paying of transaction from communication 
with the user terminal 2 0 . The synchronizing server 30 synchroni zes 
the communication to the virtual cashier terminal 12 with the 
communication to the user terminal 20 so that it performs the 
10 transaction settlement processing between the virtual cashier 
terminal 12 and the user terminal 20. 

The components have the same numbers as in Fig. 1 and are 
the same as the first embodiment. Here, these components that 
have the same action and construction as the first embodiment will 
15 not be described. 

Referring to Figs. 38 to Fig. 43, applying the electronic 
settlement system of the present embodiment , settlement processing 
of the electronic settlement performed by the user using the user 
terminal is described in the following. Fig. 38 is a flow chart 
20 showing a settlement processing in an electronic settlement system 
applying the fifth embodiment of the present invention. Figs. 
39 to 42 are flow charts showing processing of details in Fig. 
38. Fig. 43 shows examples of information indicated on the user 
computer 22 . 

25 The user connects to the Internet 2 6 using the user computer 

22, accesses the shopping server 24 on the Internet 2 6 , and performs 
the on-line shopping . While on-line shopping, checking a web page 
on the Internet 26 for shopping in the shopping server 24, the 
user chooses an item. When the user has chosen the item, a web 

30 page shown in Fig. 43(a) , which shows the purchased item(s) and 
the purchase amount, is indicated on the display unit of the user 
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computer 22. The user selects a key to direct the synchronizing 
settlement and the synchronizing settlement processing is started 
(500) , The user computer 22 accesses the cashier server 14, and 
transmits to the cashier server 14 purchase amount information 
5 including the total purchase amount (502) . 

The cashier server 14 activates the virtual cashier terminal 
12 (504) . The virtual cashier terminal 12 is processing or is 
an apparatus working as a cashier terminal . The virtual cashier 
terminal 12 may be a terminal device provided in the cashier server 
• 10 14, or may be a program activated in the cashier server 14. The 
virtual cashier terminal 12 connects to the synchronizing server 
30, sets a transaction ID as an example of a transaction ID number 
identifying the transaction, and transmits the transaction ID to 
Pi the synchronizing server 30 (506) . 

J=y 15 The synchronizing server 3 0 starts the connection to the 

S= virtual cashier terminal 12 corresponding to the access from the 

^ virtual cashier terminal 12 , and inquires cashier inf ormat ionbased 

to on the cashier registration number transmitted from the virtual 

^ cashier terminal 12 (508) . Fig. 39 is a flow chart showing the 

y 20 cashier information inquiry 508 processing. The cashier 

information inquiry 508 processing is the same as the cashier 
information inquiry 206 processing of the second embodiment shown 
in Fig. 17 and will not be described here. 

The cashier server 14 creates link information (510) , and 
25 transmits the link information to the user computer 22 (512) . The 
information shown in Fig. 43 (b) , which is created by cooperative 
processing with the cashier server 14, is indicated on the user 
computer 22. CGI (Common Gate Interface) may be used for 
cooperating the processing the user computer 22 and the cashier 
30 server 14 . The information shown in Fig. 43 (b) includes "purchase 
detail" and "synchronizing". 
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When the user chooses "purchase detail" , a list of purchased 
items and a purchase amount is indicated, so that the user may- 
confirm the details of the purchase and purchase amount. 
"Synchronizing" is attached with the "link information" to the 
5 virtual cashier terminal 12 in the cashier server 14. Thus, the 
user computer 22, choosing " Synchronizing", may connect to a 
predetermined virtual cashier terminal 12 in the cashier server 
14 (514) . 

When the user chooses" Synchronizing" , the user computer 
10 22 connects to the virtual cashier terminal 12, and transmits the 
link information confirmation signal to the virtual cashier 
terminal 12 (516) . The virtual cashier terminal 12, receiving 
the link information confirmation signal from the user computer 
22 , transmits the set transaction ID to the user computer 22 (518) . 
Q 15 Receiving the transaction ID from the virtual cashier terminal 
f2 12, in the user computer 22 as shown in Fig. 43(c) , a window for 

SJ the cashier browser is activated, a virtual cashier terminal is 

Q displayed in the window of the cashier browser, and a direction 

2 to input the transaction ID is displayed (520) . 

y 20 The user computer 22, indicating the transaction ID in the 

window of the cashier browser, may notify the user the transaction 
ID (522) . The user inputs to the user terminal 20 the transaction 
ID indicated in the window of the cashier browser of the user computer 
22 (524) . The user terminal 20 transmits the transaction ID input 
25 by the user to the synchronizing server 30 (526) . 

The synchronizing server 30 verifies the transaction ID 
received from the virtual cashier terminal 12 in the processing 
506 and the transaction ID received from the user terminal 20 in 
the processing 526. If the transaction IDs match, the 
30 synchronizing server 3 0 synchronizes the communication to the 
virtual cashier terminal 12 with the communication to the user 
terminal 20. Fig. 4 0 is a flow chart showing a cashier number 



NI-0005 




J 1 

inquiry 528 processing . The cashier number inquiry 528 processing 
is the same as the transaction ID inquiry 116 in the first embodiment 
shown in Fig. 7 and it will not be described here. 

When the transaction ID inquiry is completed, the 
5 synchronizing server 30 transmits the synchronizing signal to the 
virtual cashier terminal 12 (530) . The virtual cashier terminal 
12, receiving the synchronizing signal from the synchronizing 
server 30, transmits to the user computer 22 the synchronizing 
signal (532) . The user computer 22, receiving the synchronizing 
10 signal from the virtual cashier terminal 12, lights a 

synchronization indicator displayed in the virtual cashier 
terminal indicated in the cashier browser (534) . Thus, the user 
may confirm the synchronizing status with the virtual cashier 
terminal 12 . 

15 The synchronizing server 3 0 , after the transaction ID inquiry 

528 processing, performs the user information inquiry 536 and the 
password authentication 538. The user information inquiry 536 
processing shown in Fig. 4 1 is the same as the user information 
inquiry 128 processing of the first embodiment shown in Fig. 8, 

20 therefore it will not be described here. The password 

authentication 538 processing shown in Fig. 42 is the same as the 
password authentication 210 processing of the first embodiment 
shown in Fig. 9, except including no visual authentication, 
therefore it will not be described here. 

25 After the password authentication 538 processing, the 

synchronizing server 30 performs available limit inquiry 540 
processing and the settlement 548 processing ; and the user terminal 
20 performs final purchase confirmation 544 processing. These 
processing's are the same as the first embodiment, therefore they 

30 will not be described here. 

The synchronizing server 30 , after the settlement processing 
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548, transmits the settlement completion notification to the 
virtual cashier terminal 12 (550) , transmits a receipt to the user 
terminal 20. The virtual cashier terminal 12, receiving the 
settlement completion notification from the synchronizing server 
5 30, transmits to the user computer 22 the settlement completion 
notification (552) . The user computer 22 indicates notification 
of the settlement completion on the displayed information. The 
user, looking at the notification, may know the completion of the 
settlement with the virtual cashier terminal 12 . 

10 In the above described embodiment, the virtual cashier 

terminal 12 sets the transaction ID as an example of the transaction 
ID number identifying the transaction, and transmits it to the 
synchronizing server 30 , The allocation method of the transaction 
ID is not limited to this method . When the virtual cashier terminal 

15 12 connects to the synchronizing server 30, the synchronizing 
server 3 0 may allocate the transaction ID to the virtual cashier 
terminal 12, and may transmit the transaction ID to the virtual 
cashier terminal 12 . 

In the electronic settlement systemof the present embodiment , 
20 the user, using a computer, accesses an on-line shopping server 
on the Internet, selects items to for purchase, and settles the 
purchased merchandise transaction using a user terminal such as 
a cellular phone. 

Using on-line shopping on the Internet, sending a credit 
25 card number as data via the Internet may create a security problem. 
Conventionally, using a hyper enciphering method, the credit card 
number is sent in the enciphered code. Applying the electronic 
settlement system of the present embodiment, the selection of the 
purchasing item is performed on the Internet, but the settlement 
30 of merchandise value is performed safely using the cellular phone 
and so on. The electronic settlement system of the present 
embodiment does not need to directly send the personal information 
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such as user identifying information or credit card information 
between the user terminal paying the settlement and the cashier 
terminal billing the settlement. Therefore, the user need not 
worry about personal information being leaked to the retailer, 
5 and privacy is protected. 

(Sixth Embodiment) 

The synchronizing server 30, as an example of the settlement 
apparatus in the electronic settlement system according to the 
first, second, third, fourth, and fifth embodiments, may be 
10 realized using a general -purpose computer. Fig. 44 is a block 
diagram showing a hardware configuration of a general -purpose 
^ computer 600. As shown in Fig. 44, a CPU 602 of the computer 600 

W is operated based on the programs stored in a ROM 604 and a RAM 

Q 606. Using an input device 608, an administrator of the 

ril 15 synchronizing server 3 0 may input data or commands. Setting 
Sj information and programs to operate the CPU 602 are stored in a 

^==1 hard disk drive 610 as an example of a storing device. 

m A floppy disk drive 614 reads data or programs from a floppy 

y disk 624 and provides them to the CPU 602. A CD-ROM drive 616 

20 reads data or programs from a CD-ROM 62 6 and provides them to the 
CPU 602 . A first communication interface 618 connects to a 
transmission line 18 and communicates data. A second 
communication interface 620 connects to a transmission line 38 
and communicates data. A database interface 612 connects to 
25 databases 622 and communicates data with the database. 

Furthermore, the synchronizing server 3 0 has an interface to 
connect with a display 628 so that the administrator may watch 
an operational status of the synchronizing server 30, or check 
the setting information using the display 628. 

30 Fig . 45 is a block diagram showing a functional configuration 

of the software operating the CPU 602 shown in Fig. 44. This 
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software is provided to users stored in a recording media such 
as a floppy disk 624 or a CD-ROM 62 6 and so on. The software stored 
in the recording media may be compressed or non- compressed . The 
software is installed from the recording media to the hard disk 
5 drive 610, read out to the RAM 606, and executed by the CPU 602. 

The software stored in the recording media to be provided, 
that is the software installed in the hard disk drive 610, has 
a settlement processing module 640, a first communication module 
642, a second communication module 644, and a database retrieving 
10 module 646, for its functional configuration. 

The processing, performed by the CPU 602 operating the 
computer 600, of the settlement processing module 640, the first 
communication module 642, the second communication module 644, 
and the database retrieve module 646, are the same as each of the 
15 settlement processing unit 80, the first communication unit 82, 
the second communication unit 84 , and the database retrieving unit 
86 in the synchronizing server 3 0 according to the first, second, 
third, fourth, and fifth embodiment ; therefore these processing' s 
will not be described here. 

20 The floppy disk 624 or CD-ROM 626 shown in Fig. 44, as an 

example of the recording media, may store a part of, or all of, 
the function for the operation of the synchronizing server 30 as 
an example of the settlement apparatus applying the entire 
embodiment described in the present application. Furthermore, 

25 the synchronizing server 30 may replace a part of the operation 
of the cashier terminal 10 and the synchronizing server 30 may 
operate a part of the operation of the cashier terminal 10 of the 
above described embodiment. In such a case, the part of the 
operation of the cashier terminal 10 described in the above 

30 embodiment may be stored in the floppy disk 624 or the CD-ROM 626 . 

These programs may be read to RAM directly from the recording 
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media and executed, or be installed to the hard disk drive once, 
then read to RAM and executed . Furthermore , these above described 
programs may be stored in a single recording medium or a plurality 
of recording media. In other cases, these programs may be stored 
5 in an encoded form. 

Besides a floppy disk and a CD-ROM, an optical recording 
media such as a DVD, a magnetic recording media such as an MD, 
a magnetic optical recording media such as a PD, a tape device, 
a semiconductor memory such as an IC card or miniature card, and 
10 so on may be used for a recording media. In other cases, using 
a store device such as a hard disk or a RAM provided in a server 
system for a recording media, connected to a private communication 
network or the Internet, the programs may be provided to the 
yj synchronizing server 30 via a communication network. Such 

O 15 recording media are used only for manufacturing the synchronizing 
server 30 , so that it is obvious that manufacturing and distribution 
of such recording media as vocation constructs infringement of 
Q a patent based on the present application. 

fy In the first, second, third, fourth, fifth, and sixth 

20 embodiments described above, the transmission line 18 connecting 
the cashier terminal 10, the vending machine 16, or the cashier 
server 14 with the synchronizing server 3 0 may be a wireless 
communication or the Internet, other than a commercial telephone 
line or a private line. When the transmission line 18 is the 
25 Internet, in order to ensure security of the data communication 
with the synchronizing server 30, it is desirable to choose a high 
security communication method. 

In another case, a bit filtering means is provided on a 
communication pathway between the carrier server 4 0 and the 
30 synchronizing server 3 0 and/or a pathway between the cashier 
terminal 10 or the cashier server 14 and the synchronizing server 
30 . The bit filtering means may detect data format or bit pattern 
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of data sent between the user terminal 20, the cashier terminal 
10, or the cashier server 14 and the synchronizing server 30. 
Applying the present invention, because confidential information 
such as personal information of a user is not sent between the 
5 user terminal 2 0 and the cashier terminal 10 or the cashier server 
14, so that the data sent to and from the synchronizing server 
3 0 does not need to be encrypted. Thus, the bit filtering means 
may observe the data format and the bit pattern of the sent data 
and find an unexpected access pattern easily. Therefore, false 
10 access to the electronic settlement system or destroying access 
may be easily detected. 

As described above, applying the electronic settlement 
system of the first embodiment, the retail clerk authenticates 
the user with a facial portrait data. In the case of an expensive 

15 settlement or the clerk is not able to be certain of the user 
authentication, the clerk further requests the user to input of 
a password, accuracy of authentication may be improved 
corresponding to the importance of a situation. The user, using 
a portable apparatus having a wireless communication function such 

20 as a cellular phone or a portable terminal , can settle a transaction 
simply, conveniently, and safely. 

Furthermore , in the electronic settlement systemof the first 
embodiment, the synchronizing server 30 corresponds the cashier 
terminal 10 and the user terminal 20 both of which perform the 

25 settlement using the transaction ID as an example of a transaction 
ID number; and completes the settlement between the corresponded 
cashier terminal 10 and the corresponded user terminal 20, without 
directly sending personal information such as a user credit card 
number, a bank account number, and so on. A method as to the 

30 synchronization of the communication using the transaction ID 
enables safe, simple, and convenient electronic settlement. 

Applying the electronic settlement system of the second 
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embodiment, both of the cashier terminal 10 and the user terminal 
20 may appoint the authentication method, and the agreeable 
authentication method is selected between the user and the retailer 
or the clerk, then the user may be authenticated. Therefore, the 
5 authentication method and the authentication accuracy demanded 
by the user, and the authentication method and the authentication 
accuracy demanded by the clerk or the retailer, may be matched. 
Furthermore, the authentication method may be varied depending 
on the purchase amount . 

10 Applying the electronic settlement system of the third 

embodiment , the user terminal 20 receives the transaction ID number 
allocated by the synchronizing server 30, displays it in the form 
of a pattern code such as a bar code, a cyber code, and so on, 
and lets the cashier terminal 10 read it in. The cashier terminal 

15 10 retrieves the transaction ID number from the pattern code and 
transmits the transaction ID number to the synchronizing server 
30. Thus, the user terminal 20 and the cashier terminal 10 are 
corresponded to each other using the transaction ID number, and 
the settlement is performed between the user terminal 20 and the 

20 cashier terminal 10 corresponded with each other . Therefore, the 
user inputs no transaction ID number so that the electronic 
settlement can be performed simply and conveniently. 

Applying the electronic settlement system of the fourth 
embodiment, the purchase and settlement using the vending machine 
25 may be performed simply and conveniently via networks. 

Applying the electronic settlement system of the fifth 
embodiment, the user, using a computer, accesses the on-line 
shopping server in the Internet, selects a purchasing item, and 
using the user terminal such as a cellular phone, may settle the 
30 value of the purchased item. The selection of the purchasing item 
is performed on the Internet , the settlement of the value of purchase 
may be performed safely, using a cellular phone and so on. The 
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user does not need to worry about personal information being leaked 
to the mail order retailer, so that privacy is protected. 

The electronic settlement system of the present invention 
has the following advantages for retailers, mail order retailers, 
5 or on-line shopping retailers using the Internet. Based on the 
uniqueness of the calling telephone number of a cellular phone, 
a secure user authentication may be ensured. On the other hand, 
because the system has a selection of authentication methods, the 
accuracy of the authentication may be easily varied corresponding 
10 to a settlement amount or a situation of the settlement. In a 
case of a small amount settlement such as a purchase at the vending 
machine, omitting the user authentication, the system may 

In authenticate the user based on the calling telephone number of 

the cellular phone and perform the settlement. In a case of a 

Q 15 larger amount settlement such as a purchase at a jewelry store, 
the clerk may authenticate the user using facial portrait data, 

'^■^-4 if the clerk is not sure enough, combining further authentication 

Q and so on, the accuracy of the authentication can be improved. 

fy The electronic settlement system of the present invention 

^ 20 has the following advantage for users . Carrying a cellular phone , 
which is a communication terminal with a high level of portability, 
a transaction may be electronically settled anytime and anywhere ; 
therefore the user does not need to carry cash, a credit card, 
a bank card, or an IC money card, and so on. Furthermore, the 
25 user, using a data packet communication facility of the cellular 
phone , may check if the payment is withdrawn from his or her account , 
his or her available amount, his or her purchase history, and so 
on. 

The electronic settlement system of the present invention 
30 has the following advantage for a credit card company. Applying 
the authentication method using a cellular phone may discourage 
a false use of stolen cards. Because a credit settlement may be 
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performed electronically using a cellular phone, issuing a credit 
card or management of a credit card is no longer needed and costs 
may be reduced. Furthermore, using a combination authentication 
method, in a case that a person responsible in the credit card 
5 company and so on moved data falsely, settlement accounts of users 
may be protected from false use. 

Although the present invention has been described by way 
of exemplary embodiments , it should be understood that many changes 
and substitutions may be made by those skilled in the art without 
10 departing from the spirit and the scope of the present invention 
which is defined only by the appended claims. 

Industrial Applicability 

15 It is obvious from the above description, according to the 

present invention, a settlement of a commercial transaction may 
be performed safely and conveniently via a communication network. 
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